All Articles

India has formally entered the Digital Personal Data Protection (DPDP) era with the Digital Personal Data Protection Act, 2023 now in force and the DPDP Rules, 2025 duly notified. Together, they establish a comprehensive statutory framework governing how digital personal data must be collected, processed, stored, and protected. This article analyses both the Act and the newly notified Rules highlighting key changes from earlier drafts and maps the practical implications f

The Digital Personal Data Protection Act, 2023 has significantly altered the legal and operational landscape for businesses processing personal data in India. Beyond statutory compliance, the Act introduces a new spectrum of legal, contractual, and product-level risks that organisations must proactively address. This article examines the key legal issues emanating from the DPDP Act and outlines a structured approach for businesses to mitigate litigation exposure and regulator