Since its introduction in August 2023, the Digital Personal Data Protection Act, 2023 (“DPDP Act”)[1], along with the draft DPDP Rules, 2025 (“Draft Rules”)[2], released earlier this month (Click here to read our article on the Draft Rules), has prompted extensive dialogue. Understanding the practical implications and compliance requirements the Draft Rules seek to introduce is essential before their finalisation, to ensure smooth implementation.
In this FAQ section, we address some of the key questions organisations may have as they navigate the changes and prepare for effective rollout of the Act and the Rules.