Handbook on the Digital Personal Data Protection Act, 2023

Contents at a Glance

About Corporate Professionals........................................................................................... v
Brief Profile of Experts who have contributed to this Book ............................................... xi
Contents at a Glance........................................................................................................ xv
How to Read The Book/ Some Unique Features of The Book .........................................xvii
Objectives and Legislative Intent of The “Digital Personal Data Protection Act,
2023”.............................................................................................................................xviii
Overview of The “Digital Personal Data Protection Act, 2023”.................................... xix
Justice K.S. Puttaswamy v. Union of India Case........................................................xxxiii
Justice B.N.Srikrishna Committee Report – A Free and Fair Digital Economy:
Protecting Privacy, Empowering Indians..................................................................xxxvii

Division I
The Digital Personal Data Protection Act, 2023

Arrangement of Sections ............................................................................................1.iii
The Digital Personal Data Protection Act, 2023 ....................................................... 1.1

Division II
Notifications issued under the DPDP Act, 2023

The Digital Personal Data Protection Rules, 2025.................................................... 2.3
Notification issued under Section 1(2) .................................................................... 2.37
Notification issued under Section 18(1) & (3)......................................................... 2.38
Notification issued under Section 19(1) .................................................................. 2.39

Division III
Ready Referencer

1. Enforcement Status of the Digital Personal Data Protection Act, 2023............. 3.3
2. Enforcement Status of the Digital Personal Data Protection Rules, 2025 ......... 3.6
3. All About Consent under DPDP............................................................................ 3.8
4. Children’s Data Protection.................................................................................... 3.11
5. Processing of Children’s Data – Do’s & Don’ts.................................................. 3.13
6. Rights of Data Principal......................................................................................... 3.15
7. Data Breach ............................................................................................................. 3.16
8. Compliance Lifecycle – DPDP Data Journey...................................................... 3.18
9. Practitioner’s “Do’s & Don’ts”.............................................................................. 3.21
10. All Illustrations used under DPDP Act and Rules........................................... 3.23
11. Offences Liable to Penalty................................................................................... 3.28
12. Data Protection Board of India (DPB)................................................................ 3.30
13. Appeal & Dispute Resolution under DPDP ..................................................... 3.32
14. Matters for Which Rules Are to Be Prescribed................................................. 3.34
15. Exemptions from Various Provisions of DPDP Act ........................................ 3.38
16. List of Amendments to Other Acts made by DPDP Act................................. 3.40
17. Grey Areas and Issues which may Arise in Future under DPDP Act........... 3.41
18. GDPR vs DPDP..................................................................................................... 3.46

Division IV
Other Reference Materials

Forty- Eighth Report Standing Committee on Communications and
Information Technology (2022-23)........................................................................ 4.3
Fifty - Fifth Report Standing Committee on Communications and
Information Technology (2023-24)...................................................................... 4.92
The Information Technology Act, 2000 ................................................................... 4.37
The Information Technology (Rasonable Security Practices and Procedures
and Sensitive Personal Data or Information) Rules, 2011 ............................. 4.20