The Digital Personal Data Protection Act (DPDPA), 2023, commonly known as the 'Privacy Law' or the 'Data Protection Law', received the Honourable President's approval on August 11, 2023. This landmark legislation focuses on ensuring accountability in handling digital personal data and emphasises the importance of explicit and transparent consent for data collection, processing, and storage. The Act represents a paradigm shift that will redefine how businesses operate by introducing stringent data protection and privacy measures that align seamlessly with global standards. 

Key highlights of the DPDPA

What our leaders have to say

Vishesh C. Chandiok"DPDPA is the big shift towards enabling India’s digital economy and its innovation ecosystem - laying the groundwork for a data-driven business environment that thrives on creating investor value, improving organisational culture and enhancing customer trust."
Vishesh C Chandiok, Chief Executive Officer, Grant Thornton Bharat

Deepankar Sanwalka"India’s privacy era ushers in fresh opportunities for businesses in the realm of technology enablement and transformation. Responsible adoption will be key towards striking a fine balance between innovation and privacy."
Deepankar Sanwalka, Senior Partner, Grant Thornton Bharat

Impact of DPDPA

The DPDP Act establishes a uniform and standardised approach to data protection. However, it will have a widespread impact on various sectors -

Financial Services
  1. Customer profiling, authentication, sensitive data
  2. Process outsourcing - fintech partnerships, data processing, product alliances
  3. Risk management - credit, AML, fraud, insurance
  4. Financial information and transaction data

Download report    To know more about the industry, click here

TMTE (Tech, Media, Telecom and Entertainment)
  1. Personal preferences and behaviour
  2. Device information and location
  3. Digital communication data and transaction data
  4. Sensitive data from online activities

To know more about the industry, click here

Consumer, Retail & E-commerce
  1. Name, address and contact numbers
  2. Consumer preferences
  3. Payment and transaction data

Download flyer    To know more about the industry, click here

Healthcare and Lifesciences
  1. Patient health records
  2. Health insurance
  3. Clinical trial data
  4. Biometric and genetic data

To know more about the industry, click here

Tourism and Hospitality
  1. Travel itinerary
  2. Payment information
  3. Reservation information
  4. Guest feedback

Transforming challenges into business opportunities

How Grant Thornton Bharat can help?

  • Develop customised approaches for different industries
  • Establish and manage Data Protection Offices
  • Implement automated tools for compliance
  • Provide guidance in data gathering to meet DPDPA’s requirements
  • Assist in streamlining data assimilation and management
  • Offer independent data audit services
  • Assist with integrating compliance into governance practices
  • Ensure airtight compliance to uphold the reputation of independent directors
  • Support Chief Information Officers and Chief Security Officers
  • Collaborate with technical experts to align IT systems with DPDPA’s requirements
  • Provide expert dispute resolution for data breaches

Digital Personal Data Protection Act (DPDPA), 2023

Digital Personal Data Protection Act (DPDPA), 2023The Act is set to have a widespread impact across various sectors, given that nearly every sector, in one way or the other, handles personal and sensitive data

Download our brochure

Report

How will the DPDP Act impact Financial Services?

The DPDP Act of 2023 aims to protect personal data, empower individuals, and enforce strict data handling standards.

Publication

Auto Byte - November 2023

Assessing Digital Personal Data Protection Act’s (DPDPA) influence on the automotive industry

Flyer

Building consumer trust through robust data protection

DPDPA marks a significant paradigm shift, emphasising stringent data protection and privacy measures that will redefine how businesses will operate.

DPDP Act, 2023

Download copy of the Act

Frequently asked questions (FAQs)

Click here to read the FAQs

Events

19 Oct Past Event

Decoding Digital Personal Data Protection Act for Global Inhouse Centres

4:00 PM
View all events
Akshay Garkel
Get in touch
Partner & Leader Cyber
Akshay Garkel
Contact us To know more about our Cyber practice, click here
Akshay Garkel
Contact us To know more about our Cyber practice, click here
Akshay Garkel
Partner & Leader Cyber
Akshay Garkel
+91 22 6626 2600

Our Insights

View more
Data Protection Act 2023's Impact on Consumer Businesses: The Way Forward
Media article Data Protection Act 2023's Impact on Consumer Businesses: The Way Forward
This article discusses the introduction of the Digital Personal Data Protection Act and its implications for businesses, especially in the e-commerce and D2C sectors. It covers various aspects- the need for express user consent, data collection and usage limitations, data security measures, breach notifications, and the role of data fiduciaries. The article also offers recommendations for businesses to ensure compliance and build consumer trust in an era of increasing data protection awareness.
6 min read | 18 Oct 2023
Safeguarding progress, protecting privacy - shaping India’s healthier future
Media article Safeguarding progress, protecting privacy - shaping India’s healthier future
The Digital Personal Data Protection Act 2023 emphasize on healthcare sector's requirement of patient assent, ensure patient privacy and compliance with the law.
4 min read | 10 Sep 2023
Digital Personal Data Protection Act 2023: What does it mean for India’s financial services sector
Media article Digital Personal Data Protection Act 2023: What does it mean for India’s financial services sector
The Digital personal data protection act 2023 includes Regulators, through guidelines on customer protection and data privacy, outsourcing, information security and technology.
5 min read | 06 Sep 2023
    View more