Resources
Plain-English guides to India’s Digital Personal Data Protection Act — the law itself, the vocabulary, your rights, and what it asks of anyone collecting personal data. Search, or pick a lane to start.
18 GUIDES
UPD AUG 2026
Foundations
The Act itself, and the vocabulary the rest is built on. Start here.
DPDP, Explained
What the law is, who it applies to, and what it asks of anyone collecting personal data.
1.02DPDP Glossary
Plain-language definitions of the key terms — Data Fiduciary, Data Principal, Consent Manager, and more.
1.03DPDP Updates & Timeline
A running, append-only log of what's changed since the DPDP Rules were notified.
1.04Grievance & Enforcement
The Data Protection Board, how to complain, how inquiries run, and where appeals and penalties land.
For Businesses & Professionals
Collecting and handling personal data the compliant way.
Your Role & Responsibilities Under DPDP
Whether you're a Data Fiduciary, Processor or Significant Data Fiduciary — the duties and liability that come with each role.
2.02Collecting Data Compliantly
Consent and notice at the point of capture, only the data you need, and a record you can stand behind — for the forms, documents and KYC you handle.
2.03Consent Mechanics
Writing a notice that qualifies, designing a consent flow that holds up, and where common shortcuts quietly fail.
2.04DPDP Compliance Operations
The how-to layer for businesses — breach plans, DPIAs, consent records, retention and vendor contracts to put DPDP into practice.
2.05Templates & Tools
Free, ready-to-fill templates for the documents DPDP compliance actually requires — copy, fill in, done.
2.06Build-Your-Own Guides
Step-by-step guides for building your own compliance artifacts, for readers who want the reasoning, not just a fill-in-the-blank template.
2.07DPDP in Practice
Annotated, visual breakdowns of DPDP compliance — good vs bad, side by side, for when seeing it is faster than reading it.
2.08DPDP by Industry
The DPDP obligations that actually bite in your specific line of work — beyond the generic law.
2.09Children's Data Under DPDP
Verifiable parental consent, no tracking or targeting of minors, and what your business actually has to do about it.
2.10Cross-Border Data & Global Applicability
Whether DPDP reaches foreign companies, what's allowed sending Indian data overseas, and how it compares to GDPR.
For Individuals
Your personal data, and the rights the law gives you over it.
Your Data, Your Rights
What you're entitled to, how to use each right, and what to do when a company gets it wrong.
3.02Safe Document Handling
Mask what you don't need to show, share the minimum, use a safe channel, and delete when you're done.
3.03Protecting Your Personal Data
The everyday habits — devices, accounts, documents, identity — that keep your personal data out of the wrong hands.
3.04Children & Parents
The protections DPDP gives children under 18, and practical ways to control what apps and schools collect from your kids.