The Digital Personal Data Protection Act, 2023.
Central Act · Act 22 of 202344 provisions
The enactment
| Long title | An Act to provide for the processing of digital personal data in a manner that recognises both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes and for matters connected therewith or incidental thereto. |
|---|---|
| Type | Act |
| Citation | Act 22 of 2023 |
| Year | 2023 |
| Jurisdiction | Central |
| Ministry | Ministry of Electronics and Information Technology |
| Status | In force as published by the source |
| Provisions published | 44 |
| Subjects | technology |
Full text, provision by provision
Every provision below opens in full, free and without an account.
- Section 1 Short title and commencement.
- Section 2 Definitions.
- Section 3 Application of Act.
- Section 4 Grounds for processing personal data.
- Section 5 Notice.
- Section 6 Consent.
- Section 7 Certain legitimate uses.
- Section 8 General obligations of Data Fiduciary.
- Section 9 Processing of personal data of children.
- Section 10 Additional obligations of Significant Data Fiduciary.
- Section 11 Right to access information about personal data.
- Section 12 Right to correction and erasure of personal data.
- Section 13 Right of grievance redressal.
- Section 14 Right to nominate.
- Section 15 Duties of Data Principal.
- Section 16 Processing of personal data outside India.
- Section 17 Exemptions.
- Section 18 Establishment of Board.
- Section 19 Composition and qualifications for appointment of Chairperson and members.
- Section 20 Salary, allowances payable to and term of office.
- Section 21 Disqualifications for appointment and continuation as Chairperson and Members of Board.
- Section 22 Resignation by Members and filling of vacancy.
- Section 23 Proceedings of Board.
- Section 24 Officers and employees of Board.
- Section 25 Members and officers to be public servants.
- Section 26 Powers of Chairperson.
- Section 27 Powers and functions of Board.
- Section 28 Procedure to be followed by Board.
- Section 29 Appeal to Appellate Tribunal.
- Section 30 Orders passed by Appellate Tribunal to be executable as decree.
- Section 31 Alternate dispute resolution.
- Section 32 Voluntary undertaking.
- Section 33 Penalties.
- Section 34 Crediting sums realised by way of penalties to Consolidated Fund of India.
- Section 35 Protection of action taken in good faith.
- Section 36 Power to call for information.
- Section 37 Power of Central Government to issue directions.
- Section 38 Consistency with other laws.
- Section 39 Bar of jurisdiction.
- Section 40 Power to make rules.
- Section 41 Laying of rules and certain notification.
- Section 42 Power to amend Schedule.
- Section 43 Power to remove difficulties.
- Section 44 Amendments to certain Acts.
Find the provision, not just read it
The full text above is free, and it stays free. What a free CourtMesh account adds is everything you cannot do by reading one page at a time:
- Search 49,000+ Central and State enactments by what a provision says, not by its number
- Jump from any section to every judgment that has applied it
- Search 300 million+ Indian court records alongside the statute
- Ask a research agent to find and read the case law on a provision for you
Free account. No card. About a minute to create.
Create a free accountNeed this as data, not as a page? The Digital Personal Data Protection Act, 2023. is one of 49,000+ enactments on CourtMesh. The Indian court cases API serves the case law that cites these provisions over JSON, with API documentation and plans and pricing. See also the judgment library.