DPDP Act 2023
India's Digital Personal Data Protection Act 2023 and Rules — controls, fiduciary duties, and principal rights.
Where it lives
Frameworks → DPDP Act 2023 (/frameworks/dpdp)
India's data protection law (plus Rules) — Data Principal rights, Data Fiduciary duties, children's data, Significant Data Fiduciary obligations, and the Data Protection Board.
In-page tabs
Score ring, theme breakdown, and a nine-step compliance journey.
38 criteria across six themes. Instrument badge: Act vs Rules. Expand for points of focus, evidence, and policies.
Filter by theme, instrument, and status. Slide-over task panel; admins add custom tasks.
Twelve mapped policies (notice, consent, retention, and similar).
Evidence grouped by control with status dropdown and attachments.
Seeded tasks with Act/Rules filter.
Themes ranked by remaining gap.
Themes include Processing Obligations, Data Fiduciary, Data Principal Rights, Children & Vulnerable Persons, Significant Data Fiduciary, and Governance & Enforcement.
Penalties under the Act can be severe. Treat Significant Data Fiduciary duties as Do now if they apply to you.