Do you know?
The Digital Personal Data Protection Act, 2023 and the Rules, 2025 are applicable to you, if:
Processing Data Within India
You are processing digital personal data within the territory of India, where the personal data is collected in:
- digital form; or
- non-digital form and later digitised.
Processing Data Outside India
You are located outside India, but the Act still applies if you are processing digital personal data in connection with:
- any activity related to offering goods or services to individuals located within India.
The Act does not apply if:
- Personal or Domestic Use
- Personal Data Made Publicly Available
Personal Data – any data about an individual who is identifiable by or in relation to such data. Here, data meansa representation of information, facts, concepts, opinions or instructions in a manner suitable for communication, interpretation or processing by human beings or by automated means.Processing – in relation to personal data, means a wholly or partly automated operation or set of operations performed on digital personal data, and includes operations such as collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction. Here, digital personal data means personal data in digital form.