Handbook on the Digital Personal Data Protection Act, 2023

This handbook on the Digital Personal Data Protection Act, 2023 provides a comprehensive and practical guide to India's landmark data protection legislation, updated to the January 2026 edition. Designed for corporate professionals and legal practitioners, the book goes beyond the bare text of the Act to offer structured insights into the legal, regulatory, and compliance framework governing personal data protection in India.

The handbook includes the complete text of the Digital Personal Data Protection Act, 2023, along with the relevant rules framed under the Act, including the Digital Personal Data Protection Rules, 2025, and all notifications issued by the Ministry from time to time. It incorporates legislative clauses, referred provisions of other applicable laws, and concise commentary to aid clear understanding and practical application.

In addition, the book features ready referencers on key concepts under the DPDP Act, an overview of the Act's structure and objectives, important parliamentary standing committee reports on citizens' data security and privacy, and relevant extracts from the Information Technology Act, 2000, including the Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules, 2011.

Updated for 2026, this handbook serves as a valuable resource for in-house counsel, compliance officers, data protection professionals, corporate advisors, lawyers, policymakers, and students seeking an authoritative and up-to-date reference on India's evolving personal data protection regime.

About Corporate Professionals
Brief Profile of Experts who have contributed to this Book
Contents at a Glance
How to Read The Book/ Some Unique Features of The Book
Objectives and Legislative Intent of The “Digital Personal Data Protection Act, 2023”
Overview of The “Digital Personal Data Protection Act, 2023”
Justice K.S. Puttaswamy v. Union of India Case
Justice B.N.Srikrishna Committee Report – A Free and Fair Digital Economy: Protecting Privacy, Empowering Indians
Division I: The Digital Personal Data Protection Act, 2023
Arrangement of Sections
The Digital Personal Data Protection Act, 2023
Division II: Notifications issued under the DPDP Act, 2023
The Digital Personal Data Protection Rules, 2025
Notification issued under Section 1(2)
Notification issued under Section 18(1) & (3)
Notification issued under Section 19(1)
Division III: Ready Referencer
Enforcement Status of the Digital Personal Data Protection Act, 2023
Enforcement Status of the Digital Personal Data Protection Rules, 2025
All About Consent under DPDP
Children’s Data Protection
Processing of Children’s Data – Do’s & Don’ts
Rights of Data Principal
Data Breach
Compliance Lifecycle – DPDP Data Journey
Practitioner’s “Do’s & Don’ts”
All Illustrations used under DPDP Act and Rules
Offences Liable to Penalty
Data Protection Board of India (DPB)
Appeal & Dispute Resolution under DPDP
Matters for Which Rules Are to Be Prescribed
Exemptions from Various Provisions of DPDP Act
List of Amendments to Other Acts made by DPDP Act
Grey Areas and Issues which may Arise in Future under DPDP Act
GDPR vs DPDP
Division IV: Other Reference Materials
Forty-Eighth Report Standing Committee on Communications and Information Technology (2022-23)
Fifty-Fifth Report Standing Committee on Communications and Information Technology (2023-24)
The Information Technology Act, 2000
The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011