Digital Personal Data Protection Act: Five Essentials for Indian Founders

The DPDP Act, 2023 represents the most significant shift in India’s data privacy landscape in two decades. Here are the five operational shifts every founder should action now.

First, consent must be free, specific, informed, and unconditional. Second, every data fiduciary must publish clear notice. Third, processing of children’s data has hard rules. Fourth, breach notification is mandatory. Fifth, the Data Protection Board has serious enforcement teeth.