The DPDP Act 2023: What Corporates Need To Prepare For
- IJLLR Journal
- 11 minutes ago
- 1 min read
Ronald Philips, Advocate
ABSTRACT
The Digital Personal Data Protection Act, 2023 is India’s first comprehensive law on how personal data must be collected, stored and used. It came after the Supreme Court held, in K.S. Puttaswamy v. Union of India, that privacy is a fundamental right. This article looks at what the Act actually requires of companies: getting clear and specific consent from users, honouring their rights over their own data, and meeting extra obligations if a company qualifies as a Significant Data Fiduciary. It also covers the rules on sending data outside India, the penalties the Data Protection Board can impose, and how the Act affects different sectors such as technology, banking, e-commerce and healthcare differently. Recent surveys show that many Indian businesses are still not prepared for these obligations. The article ends by setting out the practical steps companies need to take now to bring their data practices in line with the law.
