/FAQ
DPDP frequently asked questions
77 questions across 8 topics.
DPDP basics
What the DPDP Act covers, who it applies to, what digital personal data means, what the 2025 Rules add, and how much of it is in…
Consent and notice
What valid consent looks like, what a notice must contain under rule 3, how withdrawal works, legitimate uses, Consent Managers…
Data breaches and security
What a personal data breach is, the 72 hour report to the Board, what affected people must be told, minimum security safeguards…
Children's data
Who counts as a child, what verifiable parental consent requires, the tracking and advertising bans, the Fourth Schedule…
Rights of individuals
Access, correction, erasure, grievance redressal and nomination, how to exercise each right under rule 14, plus the duties the…
Penalties and the Board
Maximum penalties in the Schedule, how the Board decides an amount, how complaints reach it, the digital office, appeals to…
Timeline and commencement
When the DPDP Act was enacted, what took effect on 13 November 2025, what follows in November 2026 and May 2027, and what binds…
Significant Data Fiduciaries and cross-border transfers
How an SDF is designated, its extra duties under rule 13, the annual DPIA and audit, transfers outside India, and the Third…