Question 1

What is the Digital Personal Data Protection Act (DPDPA), 2023?

Accepted Answer

The Digital Personal Data Protection Act, 2023 is India's comprehensive data protection legislation that governs the processing of digital personal data. It establishes a legal framework for data collection, storage, and processing while empowering individuals with rights over their personal data.

Question 2

When did the DPDP Rules 2025 come into effect?

Accepted Answer

The DPDP Rules 2025 were officially notified on January 3, 2025, providing detailed implementation guidelines for the DPDPA 2023.

Question 3

What are the penalties for non-compliance under DPDPA?

Accepted Answer

Penalties under DPDPA range from ₹10,000 for data principal violations to up to ₹250 crore for breach of security safeguards by data fiduciaries. The exact penalty depends on the nature and severity of the breach.

Question 4

What are Data Principal rights under DPDPA?

Accepted Answer

Data Principals have rights including: accessing their personal data, correcting inaccuracies, erasing data, seeking grievance redressal, nominating representatives, and withdrawing consent at any time.

Question 5

Who is a Significant Data Fiduciary?

Accepted Answer

A Significant Data Fiduciary is an entity designated by the Central Government based on factors like volume and sensitivity of data processed, risk to data principal rights, and potential impact on India's sovereignty. They face enhanced compliance obligations including appointing a DPO and conducting DPIAs.

🎯 Comprehensive FAQ on DPDPA 2023 & DPDP Rules 2025

📊 DPDPA & DPDP Rules at a Glance

📑 Browse FAQ by Category