Answering key questions about India’s data protection regulations
Cite this
Citations are auto-generated; verify before publishing. The longform classification is PolicyDhara's, not the source's.
Long-form analysis — an in-depth researched piece examining a policy area. Context and interpretation rather than a policy instrument.
Summary
The Digital Personal Data Protection Act (DPDP Act) governs how organisations in India collect, store, and use personal data. In November 2025, the Ministry of Electronics and Information Technology government notified the act and the DPDP Rules, and organisations have until May 2027 to become compliant. The act applies to any entity that collects personal data, which includes nonprofits. For a sector that has long relied on field staff, offline forms, and informal channels such as WhatsApp to c