Framework library · India

DPDP Act 2023

Digital Personal Data Protection Act 2023 (India). Published by MeitY (India), version 2023. Kapālins maps it at category level: the assessment’s 2 AI-risk areas, each tied to this framework, rather than clause by clause. Both risk areas are proved by a live signal from the platform.

Read the source document

Risk areas mapped
Personal data safeguards in AI processing (s 8(5))Live signal
Data-fiduciary governance & DPIA (ss 8, 10)Live signal

Live signal: a signal from the gateway, probes or device sensor proves it continuously. Assessment: it is evidenced by answers to the assessment. Both are exported in the regulator evidence pack.

History

How the DPDP Act 2023 got here.

  1. Adopted

    The Digital Personal Data Protection Act 2023 (No. 22 of 2023) received Presidential assent. Gazette of India (via MeitY)

  2. Proposed

    MeitY released draft Digital Personal Data Protection Rules 2025 for public consultation until 18 February 2025. Press Information Bureau

  3. Adopted

    The Government notified the DPDP Rules 2025, starting an eighteen-month phased compliance period. Press Information Bureau

  4. In force · upcoming

    Rule 4 on registration and obligations of Consent Managers comes into force one year after the Gazette publication of the DPDP Rules 2025. Gazette of India (via MeitY)

  5. In force · upcoming

    Rules 3, 5 to 16, 22 and 23, covering notice, security, breach reporting and most Data Fiduciary duties, come into force eighteen months after Gazette publication. Gazette of India (via MeitY)