Frequently Asked Questions
Got questions? We've got answers. Find quick solutions to common queries below.
DPDPA aims to protect Indian citizens' digital personal data and ensure organizations process it lawfully, transparently, and securely.
Any entity that determines the purpose and means of processing personal data — including startups, government bodies, and MNCs.
Yes. If a company offers goods or services to Indian users, it must comply with DPDPA regardless of where it's headquartered.
DPDPA is more flexible — it centralizes governance under India's DPBI, allows selective cross-border transfers, and includes unique rights like the 'Right to Nominate.'
Penalties can range from ₹50 crore to ₹250 crore, depending on the nature and gravity of the violation.
The government is expected to roll out DPDPA rules in phases, starting with the establishment of the Data Protection Board of India.