All regulations
India

India DPDP Act 2023

India's Digital Personal Data Protection Act 2023 regulates how personal data of Indian citizens is processed, with notice, consent and breach reporting obligations.

Who it applies to

  • Data Fiduciaries processing Indian residents' personal data
  • Significant Data Fiduciaries designated by the government
  • AI products handling Indian user data, including from abroad

Core obligations

  • Obtain clear, specific consent before processing
  • Provide notice of purpose and rights in plain language
  • Implement security safeguards and breach reporting
  • Enable data principal rights including correction and erasure

How Vigil24 helps

  • Detects AI tools processing Indian user data
  • Maps consent and notice obligations per tool
  • Tracks breach response readiness