DPDP Act (India)

What is DPDP Act (India) ?

The Digital Personal Data Protection Act sets rights for individuals and obligations for data controllers and processors handling digital personal data in India. It requires lawful processing, consent, minimization, breach notification, and contractually enforced safeguards for third parties. In TPRM, organizations must confirm vendor compliance.

FAQs

Does the act apply to foreign companies?

Yes, if they process data of individuals in India.

Do vendors have independent obligations?

Yes, processors must comply with specified duties.

Does the act require breach notification?

Yes, timely reporting is mandated.