DPDP Act

DPDP Act is India's Digital Personal Data Protection law, which sets rules for how companies handle your personal data and your rights over it.

DPDP Act: The Digital Personal Data Protection Act is India's law on personal data. In plain words, it says companies must ask clearly before using your data, use it only for that purpose, keep it safe, and respect your rights to know, correct and erase it.

It gives people a say. You can expect a clear notice about what is collected and why, a way to withdraw consent, and a route to ask for your data to be corrected or deleted. Companies that handle data must protect it and report serious breaches. There is a body that handles complaints and can penalise companies that break the rules.

The law does not make scams disappear, and it does not protect you from your own sharing. Criminals ignore it. It also takes time for companies to adjust, and rules may be phased in. Use your rights where they help: read notices, say no to extras, ask for deletion, and complain if a company does not respond. For ordinary users, the best habit is to read notices and use the settings that the law now expects firms to provide.

Tips

• Read the notice that appears when an app asks for your data.
• Use the app's privacy settings to withdraw consent you no longer want to give.
• Keep records of your request if you ask a company to correct or erase your data.

Related terms