A Watershed Moment in Indian Data Protection
The Digital Personal Data Protection Act, 2023 (DPDP Act) marks a paradigmatic shift in India's approach to data privacy and protection. Enacted on 11th August 2023 and receiving Presidential assent shortly thereafter, this legislation represents the culmination of years of deliberation, multiple draft iterations, and extensive stakeholder consultations. As a practitioner who has closely monitored the evolution of data protection jurisprudence in India—from the Justice B.N. Srikrishna Committee Report to the present enactment—I can confidently assert that the DPDP Act is not merely another statute in our legal compendium; it is a fundamental recalibration of the relationship between individuals, businesses, and the State in the digital economy.
For lawyers and businesses alike, understanding this Act is no longer optional—it is imperative. The DPDP Act will affect every entity that processes personal data of individuals within the territory of India, regardless of where such processing occurs. This extraterritorial application, coupled with stringent penalties reaching up to ₹250 crores, necessitates immediate attention and strategic compliance planning.
Legislative Background and Context: Why the DPDP Act Matters
The genesis of the DPDP Act can be traced to the landmark Justice K.S. Puttaswamy (Retd.) v. Union of India judgment (2017), wherein the Hon'ble Supreme Court unequivocally recognized the right to privacy as a fundamental right under Article 21 of the Constitution. This constitutional mandate created an obligation upon the legislature to enact a comprehensive data protection framework.
Prior to the DPDP Act, India's data protection landscape was fragmented, governed by sectoral regulations such as the Information Technology Act, 2000, and the (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. These provisions, while well-intentioned, lacked the comprehensiveness and enforceability required in today's data-driven economy.