DPDPA compliance with ConsentX
Digital Personal Data Protection Act
India
Enacted 2023, now in force
Asia & Africa
Who it applies to
Any data fiduciary processing digital personal data in India, and those targeting people in India from abroad.
Penalties
Up to ₹250 crore per instance of non-compliance.
Key obligations
- Itemized notice and verifiable consent
- Consent in clear, plain language
- Verifiable parental consent for children under 18
- No tracking or targeted ads to children
- Easy withdrawal and a Consent Manager pathway
How ConsentX helps
DPDPA §9 age-gate and parental flows
Itemized, plain-language consent notices
Verifiable consent receipts
Withdrawal as easy as consent
Per-region rules tuned for India
Get DPDPA ready with ConsentX
Start free, or book a walkthrough with our team.
This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified counsel.
Frequently asked questions
What is DPDPA?+
The DPDPA (DPDP Act 2023) is India's national data-protection law, requiring clear notice and free, specific, informed consent before processing personal data, with the DPDP Rules notified on 13 November 2025.
Does DPDPA require age verification?+
Yes. Section 9 requires verifiable parental consent for users under 18 and bars tracking or targeted ads to children.
What counts as valid consent under DPDPA?+
Consent must follow an itemized, plain-language notice and be verifiable, with withdrawal as easy as giving it.