---
title: "Section 3: Application of Act"
url: https://dpdp.myndsolution.com/wiki/act/section-3-application-of-act/
description: "Section 3 of the Digital Personal Data Protection Act, 2023 (Application of Act). Official text verbatim, comes into force on 13 may 2027, with…"
kind: act-section
updated: 2026-09-09
official_source: https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf
text_type: official-text-plus-interpretation
publisher: MYND Integrated Solutions
license: Official Government of India texts are reproduced verbatim (public domain / open government data). Interpretation is CC BY 4.0, MYND Integrated Solutions.
disclaimer: Not legal advice. Official text prevails over any interpretation.
html_version: https://dpdp.myndsolution.com/wiki/act/section-3-application-of-act/
---
# Section 3: Application of Act

*The Digital Personal Data Protection Act, 2023 (No. 22 of 2023), Chapter I: PRELIMINARY. Comes into force on 13 May 2027.*

## Official text

Subject to the provisions of this Act, it shall—
- **(a)** apply to the processing of digital personal data within the territory of India where the personal data is collected––
  - **(i)** in digital form; or
  - **(ii)** in non-digital form and digitised subsequently;

- **(b)** also apply to processing of digital personal data outside the territory of India, if such processing is in connection with any activity related to offering of goods or services to Data Principals within the territory of India;

- **(c)** not apply to—
  - **(i)** personal data processed by an individual for any personal or domestic purpose; and
  - **(ii)** personal data that is made or caused to be made publicly available by—
    - **(A)** the Data Principal to whom such personal data relates; or
    - **(B)** any other person who is under an obligation under any law for the time being in force in India to make such personal data publicly available.


> **Illustration.** X, an individual, while blogging her views, has publicly made available her personal data on social media. In such case, the provisions of this Act shall not apply.



## Interpretation in plain English (not legal advice)

> This is a plain-English interpretation of the official text, prepared by the DPDP Wiki editorial team. It is not the law and not legal advice, and it may be incomplete or wrong. Always rely on the official text of the Act, the Rules and the notifications, and take advice from a qualified professional for your situation.

Section 3 sets out when the Digital Personal Data Protection Act applies. It covers the processing of digital personal data within India. This includes personal data that is collected in a digital format right from the start, as well as data collected in a non-digital form and later digitized. (A Data Principal is the individual to whom the personal data relates). The Act also reaches beyond India's borders. It applies to the processing of digital personal data outside of India if that processing is connected to offering goods or services to Data Principals located within India. Finally, the Act specifically excludes certain types of data processing. It does not apply when an individual processes personal data purely for personal or domestic purposes. It also does not apply to personal data that has been made publicly available by the Data Principal themselves. For example, if an individual publicly shares their own personal data on a social media blog, the Act does not apply to that data. The Act also does not apply if a person is required by an Indian law to make the personal data publicly available.

### Key points

- The Act applies to processing digital personal data in India, whether collected digitally or digitized later [(a)].
- It applies to processing outside India if connected to offering goods or services to Data Principals in India [(b)].
- The Act does not apply to personal data processed by an individual for personal or domestic purposes [(c)(i)].
- The Act does not apply to personal data made publicly available by the Data Principal themselves [(c)(ii)(A)].
- The Act does not apply to personal data made publicly available by someone legally obligated under Indian law to do so [(c)(ii)(B)].

### Common misreadings

- One might assume the Act applies to all paper records, but it only applies to non-digital data if it is subsequently digitized.
- One might think the Act protects data that a Data Principal voluntarily publishes on a public blog, but the Act explicitly excludes data made publicly available by the Data Principal.

*Interpretation prepared 2026-09-09 from the official text only; the official text prevails.*

---
Cite as: Digital Personal Data Protection Act, 2023, s. 3. Official source: https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf