The Digital Personal Data Protection Act, 2023

Mithali Kanchan

The Digital Personal Data Protection Act, 2023 (DPDPA) is a crucial legislative framework designed to oversee the processing and safeguarding of personal data. It received the assent of the President of India on 11 August 2023.
Object
The object of the DPDPA is processing of digital personal data in a manner that recognises both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes and for matters connected therewith or incidental thereto. Territorial & material scope Its territorial scope1 extends to (i) processing of data within the territory of India; and (ii) processing outside India in connection with any activity related to offering goods and services within India. Its material scope2 extends to (i) personal data that is collected in digitised form; and (ii) personal data that is collected in non-digital form and digitised subsequently.