The DPDP Act: What India's Data Protection Law Means for Your Business
S
Statura Team
India's Digital Personal Data Protection (DPDP) Act creates binding obligations for any business (a "Data Fiduciary") that processes personal data of individuals in India.
Core obligations
- Collect data only with clear, informed consent for a specified purpose
- Provide notice in plain language
- Enable data principal rights (access, correction, erasure)
- Implement reasonable security safeguards
- Report breaches
Consent & children
Consent must be free, specific and revocable. Processing children's data needs verifiable parental consent, with restrictions on tracking and targeted ads.
Penalties
Non-compliance can attract significant financial penalties, making early readiness essential.
Get ready
Statura helps map data flows, draft privacy notices and build consent and breach processes.
#DPDP act
#data protection india
#privacy
#consent