What Does The Data Protection Act 2023 Mean For Businesses?
Businesses increasingly rely on personal data to deliver digital services, personalise customer experiences and manage their daily operations. This growing dependence can also increase privacy and security risks. India’s Digital Personal Data Protection Act, 2023 (DPDP Act) establishes a framework for lawful processing of digital personal data and gives organisations greater responsibility for protecting it. What is the Data Protection Act 2023? The Digital Personal Data Protection Act 2023 (DPDP Act) governs how organisations handle digital personal data. The Act requires organisations to have a lawful basis for processing personal data, provide adequate notice, respect the rights of Data Principals and implement appropriate security safeguards. The Act follows earlier discussions around the Data Privacy Bill 2023 and establishes a legislative framework for protecting digital personal data. The Government notified the Digital Personal Data Protection Rules, 2025, in November 2025, wi...