/The Act · Chapter IX · Miscellaneous
Section 44: Amendments to certain Acts
DPDP Act, 2023 (No. 22 of 2023). In force since 13 November 2025.
- Provision
- Section 44 of The Digital Personal Data Protection Act, 2023
- Status
- In force since 13 November 2025 (phase 1) G.S.R. 843(E)
- Rules made under it
- None identified
- Source
- Ministry of Law and Justice (Legislative Department) · 11 August 2023 · Official PDF
In section 14 of the Telecom Regulatory Authority of India Act, 1997, in clause (c), for sub-clauses (i) and (ii), the following sub-clauses shall be substituted, namely:—
the Appellate Tribunal under the Airports Economic Regulatory Authority of India Act, 2008; and
Section 44 updates three existing laws to align them with the new data protection framework. First, it amends the Telecom Regulatory Authority of India Act, 1997. It updates the list of tribunals in that law to specifically include the Appellate Tribunal under the Digital Personal Data Protection Act, 2023.
Second, it amends the Information Technology Act, 2000. It completely removes Section 43A and removes clause (ob) from Section 87(2). It also updates Section 81 by inserting a reference to the Digital Personal Data Protection Act, 2023 right after the reference to the Patents Act, 1970.
Finally, it amends the Right to Information Act, 2005. It changes the wording in Section 8(1)(j) to substitute the previous text with a new clause. The new clause simply states "information which relates to personal information;".
Key points
- The Telecom Regulatory Authority of India Act, 1997 is amended to include the Appellate Tribunal under the Digital Personal Data Protection Act, 2023 (1).
- Section 43A of the Information Technology Act, 2000 is omitted entirely (2)(a).
- Section 81 of the Information Technology Act, 2000 is updated to include a reference to the Digital Personal Data Protection Act, 2023 (2)(b).
- Clause (ob) in Section 87(2) of the Information Technology Act, 2000 is omitted (2)(c).
- Section 8(1)(j) of the Right to Information Act, 2005 is substituted to read "information which relates to personal information;" (3).
Common misreadings
- A reader might assume Section 43A of the Information Technology Act, 2000 is still active, but this provision explicitly omits it entirely.
Interpretation prepared from the official text only, 9 September 2026. The official text above prevails.
/MYND · DPDP practice
Putting this into practice?
MYND runs DPDP compliance programmes for the data that flows through HR, payroll, finance and vendor operations: readiness assessments, consent and notice design, processor contracts and breach playbooks. Tell us what you are working on and a compliance lead will reply within one working day.