Delhi HCSupreme CourtNCLTNCLATCCIDRTRERADPDP 2023

Regulatory Framework · India

Data Privacy Lawyer in India

India's data protection law has arrived. Are you compliant?

₹250Cr

Max DPDP Penalty

2023

DPDP Act Enacted

100+

Privacy Frameworks Built

Understanding the Regulatory Framework

The Digital Personal Data Protection Act 2023 (DPDP Act) represents the most significant shift in India's data governance since the IT Act 2000. When fully notified with its Rules, it will impose obligations on every organisation processing personal data of Indian citizens — consent management, purpose limitation, data minimisation, data principal rights, breach notification, and restrictions on cross-border data transfers. Penalties under the DPDP Act reach ₹250 crore per breach. Corpus Juris Legal is at the forefront of DPDP Act advisory, helping businesses build compliant frameworks before Rules and enforcement commence.

01

DPDP Act readiness assessment and gap analysis

02

Privacy policy and notice drafting under DPDP framework

03

Data processing agreements (DPAs) with vendors and processors

04

Consent management architecture and purpose limitation compliance

05

Cross-border data transfer restrictions advisory

06

Data breach response procedures and notification planning

Frequently Asked Questions

When does the DPDP Act 2023 come into full effect?+

The DPDP Act was enacted in August 2023 but operative provisions will take effect on dates notified by the Central Government. Rules are expected in 2025-26. Businesses should begin compliance preparation now.

Who is a Data Fiduciary under the DPDP Act?+

Any person (including a company) that determines the purpose and means of processing personal data. If your organisation collects or uses personal data of Indian individuals, you are likely a Data Fiduciary with obligations under the Act.

Does the DPDP Act apply to businesses outside India?+

Yes. The Act has extra-territorial application — it applies to processing of personal data of Indian data principals even if the processing happens outside India, if in connection with offering goods or services to people in India.

Get DPDP Compliance Advice

Speak directly with a partner. No juniors, no call centres, no runaround.