DPDP Legal Intelligence Platform

DPDP Legal Intelligence Center

Track verified changes to India’s DPDP framework and understand exactly what changed, when it changed, and what it affects.

DPDP Act Status Active
Enacted Baseline
Act No. 22 of 2023 • 44 Sections in force
DPDP Rules Status Framework
Consultation & Baseline
Subordinate notice & consent standards
Last Legal Review 3 Sources
August 29, 2026
Monitored official Gazette & DPBI orders
Latest Verified Update Verified ✓
Aug 11, 2023
Act
LATEST VERIFIED UPDATE
Act Verified Official Source Aug 11, 2023

DPDP Act Gazetted

The Digital Personal Data Protection Act, 2023 was published in the Official Gazette.

This Update Affects: 1 Legal Provisions
View Timeline Analysis ↓ Official Source (The Gazette of India) ↗

Legal Update Timeline

Chronological audit log of statutory notifications, subordinate rules, and enforcement phases.

Act Verified Official Publication
Aug 11, 2023

DPDP Act Gazetted

The Digital Personal Data Protection Act, 2023 was published in the Official Gazette.

What Changed / Legal Mechanics
The Act received Presidential assent and was officially published, replacing previous data protection bills.
Who Is Affected
All Data Fiduciaries, Significant Data Fiduciaries (SDF), Third-Party Processors, and Data Principals in India.
Effective Date
August 11, 2023
Legal Authority
The Gazette of India
What Does This Change Affect? 1 Legal Provisions
UPDATED FOR THIS CHANGE ✓ • Platform reflected legal framework reviewed on August 29, 2026
Editorial Review Verified
Verified Legal Surveillance

Stay Current With DPDP Changes

Our legal intelligence engine continuously tracks Gazette publications, MeitY subordinate rules, and DPBI administrative notices without manual lag.

Live Tracked

Official Government Portals

5 verified portals monitored including The Gazette of India and MeitY.

Statute

DPDP Act Reader

Full text of the DPDP Act, 2023 with simple explanations and cross-references.

Subordinate Rules

Rules & Consultation

Detailed directory of implementing subordinate legislation and draft rules.

Statutory Version Comparison

Section 8: General obligations of Data Fiduciary

Previous Version
Version 1.0 (Original Enactment)
Effective: August 11, 2023
Current / Proposed Version
Version 1.1 (Updated Mandate)
Official Ref: Gazette of India Extraordinary
Added Text Removed Text
(1) A Data Fiduciary shall, irrespective of any agreement to the contrary or of any consent given by a Data Principal, be responsible for complying with the provisions of this Act. (6) In the event of a personal data breach, the Data Fiduciary shall give the Board and each affected Data Principal intimation of such breach within 72 hours in such form and manner as may be prescribed. (7) A Data Fiduciary shall erase personal data upon Data Principal withdrawing consent or purpose being served. (8) A Data Fiduciary shall deploy multi-factor authentication and conduct quarterly automated vulnerability assessments for all sensitive processing environments.
View Full Section 8 →