Skip to main content


First Impressions: The Digital Personal Data Protection Act

The current version of this post with footnotes in PDF is available here: [ GoogleDocs ] WORKING DRAFT v1, August 2023 Anomalies and Ambiguities A Reading of India’s 2023 Digital Personal Data Protection Law NANDITA SAIKIA Contents Introduction 1. Digital Personal Data 2. Data Principals 3. Data Processing and Data Breaches 4. The Location of Processing 5. Those who Process Personal Data 6. Permissible Processing at Will 7. Managing Consent for Processing 8. Withdrawing Consent for Processing 9. Individuals Requesting Their Data 10. DPDPA Exemptions Appendix: DPDPA Povisions re The Data Protection Board re Penalties (Annotated Chapter) Introduction [Note: This document has been shared only for the purpose of academic discussion. It is not legal advice and should not be relied upon for any purpose. It has not been proofed, and it may not be accurate or complete.] The Digital Personal Data Protection Act, 2023, (referred to as the 'DPDPA&