Understand the DPDP Act and DPDP Rules, 2025
Practical, plain-language guides for teams preparing for India's Digital Personal Data Protection law: consent, rights, breaches, children's data, penalties and a step-by-step compliance checklist.
DPDP Act 2023 explained: a practical guide for Indian businesses
What the Digital Personal Data Protection Act, 2023 means for your business: who it applies to, consent, rights, children, breaches, penalties and how to comply.
Read the guide
DPDP Rules 2025: what they require and when
A clear summary of the Digital Personal Data Protection Rules, 2025: phased commencement, notices, consent managers, breach reporting in 72 hours, retention and children.
Read the guide
Consent management under the DPDP Act
How to collect, record and honour valid consent under India's DPDP Act: notices, purpose-by-purpose choices, withdrawal, proof of consent and a consent management platform.
Read the guide
DPDP compliance checklist: 12 steps to get ready
A practical DPDP Act compliance checklist: data mapping, notices, consent, rights, grievances, processors, breach response, children, retention, security and evidence.
Read the guide
Data breach notification under DPDP: the 72-hour rule
How to report a personal data breach under India's DPDP Act and Rules: who to tell, what to include, the 72-hour Board report and how to prepare your team.
Read the guide
What is a Consent Manager under the DPDP Act?
What a Consent Manager is under India's DPDP Act, how it differs from a consent management platform, registration with the Data Protection Board and how businesses connect.
Read the guide
DPDP Act penalties: up to ₹250 crore
The penalty schedule of India's DPDP Act: up to ₹250 crore for security failures, ₹200 crore for breach notification and children, and how the Board decides the amount.
Read the guide
Children's data under DPDP: verifiable parental consent
How India's DPDP Act protects children's data: verifiable parental consent for under-18s, bans on tracking and targeted ads, DigiLocker-based age verification and exemptions.
Read the guide
Consent management platform for India: what to look for under DPDP
How to choose a consent management platform (CMP) for India's DPDP Act: notices in 22 languages, a consent ledger, withdrawal, children's consent, rights and evidence.
Read the guide
DPDP Act vs GDPR: the key differences explained
How India's DPDP Act 2023 differs from the EU GDPR: scope, lawful bases, children, breach reporting, cross-border transfers, DPOs, penalties and Consent Managers.
Read the guide
How to write a DPDP-compliant privacy notice
What a privacy notice must contain under the DPDP Act and Rules 2025: itemised data, specific purposes, withdrawal, rights, Board complaints and Indian languages.
Read the guide
Data Principal rights under the DPDP Act, and how to handle them
The rights of Data Principals under the DPDP Act, 2023: access, correction, erasure, withdrawal, nomination and grievance redressal, and how to answer them on time.
Read the guide
Data Protection Officer under the DPDP Act: who needs one and what they do
When the DPDP Act requires a Data Protection Officer, the DPO's role and reporting line, what every other company must publish instead, and how to support the DPO.
Read the guide
Significant Data Fiduciary (SDF) under DPDP: criteria and obligations
What makes an organisation a Significant Data Fiduciary under the DPDP Act, and the extra duties: DPO in India, independent data auditor, annual DPIA and audit, and more.
Read the guide
Cross-border data transfer under the DPDP Act
Can personal data leave India under the DPDP Act? How the negative-list model works, sectoral localisation rules such as RBI's, and what the DPDP Rules 2025 add.
Read the guide
Legitimate uses under DPDP Section 7: processing without consent
The legitimate uses in Section 7 of the DPDP Act that allow processing without consent: voluntary sharing, State functions, legal duties, emergencies and employment.
Read the guide
Rather see it working?
ConsentLo runs every one of these obligations as a workflow, with the deadlines built in.