Resource hub
Understand the DPDP Act — in plain English.
India's Digital Personal Data Protection Act, 2023 changes how every business handles personal data. We've translated the Act and the Rules into clear, accurate, regularly-updated guides — so you can understand your obligations before you act on them.
What Is the DPDP Act, 2023? A Plain Guide
A plain-English guide to India's Digital Personal Data Protection Act, 2023 — what it is, who it covers, what it requires, and how to comply.
Read the guideDPDP Rules 2025, Explained
What the DPDP Rules mean for your business — the operational detail behind the Act, the phased timeline, and the obligations you need to act on.
Read the guideDPDP Compliance Checklist (2026)
A practical, step-by-step DPDP Act compliance checklist for Indian businesses — what to do, in what order, to be ready before the deadline.
Read the guideDPDP Compliance Deadlines & Timeline
The DPDP Act compliance timeline explained — the phased rollout, the key dates, and the 13 May 2027 deadline for core obligations.
Read the guideDPDP Act Penalties & Enforcement
What it costs to get DPDP wrong — penalties up to ₹250 crore, how the Data Protection Board enforces them, and how to reduce your exposure.
Read the guideWhat Is a Significant Data Fiduciary?
Significant Data Fiduciaries face extra DPDP duties — a DPO in India, annual DPIAs, and audits. Find out if you're likely one, and what it means.
Read the guideDPDP Act Glossary of Terms
A plain-English glossary of DPDP Act terms — Data Fiduciary, Data Principal, Consent Manager, SDF, and more, defined simply.
Read the guideThese guides are general information about the DPDP Act, 2023 and related rules — not legal advice. Where something is proposed or unconfirmed, we say so and date it. Always confirm specific obligations against the official notified text or with a qualified lawyer.
Reading is step one. Knowing your gaps is step two.
Take the free DPDP Quick Scan for an instant, personalized snapshot of where you stand.