Home / Glossary / DPDP Act
Glossary

DPDP Act

The Digital Personal Data Protection Act 2023 is India's data protection law. With the DPDP Rules 2025, it sets how organisations (Data Fiduciaries) collect and process the personal data of people (Data Principals), and the penalties for failing to.

Also known as: Digital Personal Data Protection Act 2023, DPDPA

Key dates

  • 13 November 2026: consent manager rules commence under the DPDP Rules 2025.
  • 13 May 2027: full DPDP obligations in effect, with penalties up to Rs. 250 crore per instance (Gazette G.S.R. 843(E) to 846(E)).

In Raidu

Wheelhouse indexes 130 provisions from the DPDP Act 2023, the DPDP Rules 2025 and the CERT-In Directions 2022, each with its source clause and commencement date, and obligations go live on the commencement date on their own. See DPDP readiness and Wheelhouse.

Common questions

Questions about DPDP Act.

When do full DPDP obligations apply? +
From 13 May 2027, with penalties up to Rs. 250 crore per instance.
What changes on 13 November 2026? +
Consent manager rules commence under the DPDP Rules 2025.
See it in production

Raidu is the accountability layer for your data and your AI. Intercept. Explain. Prove.

See the runtime, the tamper-evident record, and what a regulator-ready trail looks like for your AI stack.