The Digital Personal Data Protection Act, 2023 is India's framework for regulating the processing of digital personal data.

Does DPDPA require consent?

Consent is one of the lawful grounds for processing personal data. Where consent is relied upon, it must meet the requirements prescribed under the Act.

Does DPDPA apply to children's data?

Yes. The Act provides additional requirements for processing children's personal data, including requirements relating to verifiable parental consent.

How does ConsentX help with DPDPA compliance?

ConsentX helps organizations manage consent notices, consent records, withdrawals, preferences, children's privacy workflows, and audit evidence.

India

DPDPA Compliance with ConsentX

Digital Personal Data Protection Act, 2023

Simplify DPDPA compliance in India with ConsentX. Manage consent, privacy notices, withdrawals, children's data requirements, and consent records through one platform.

Start Free Book a Demo

DPDPA at a Glance

Region

India

Law

Digital Personal Data Protection Act, 2023

Rules

DPDP Rules, 2025

Focus

Digital personal data, consent & privacy rights

Group

Asia

01DPDPA

Who Does the DPDPA Apply To?

The DPDPA applies to organizations, known as Data Fiduciaries, that process digital personal data in India. It can also apply to certain processing outside India when connected with offering goods or services to individuals in India.

Not sure where your site stands? Run the free DPDPA scanner.

02DPDPA

Key DPDPA Requirements

Clear Notice

Provide clear information about personal data processing.

Valid Consent

Obtain consent that is free, specific, informed, and unambiguous where consent is the applicable basis.

Easy Withdrawal

Make withdrawing consent as easy as giving it.

Children's Data

Follow additional requirements for processing children's personal data.

Data Rights

Support applicable rights and requests from Data Principals.

Security & Accountability

Maintain appropriate safeguards and compliance processes.

03DPDPA

How ConsentX Helps

Clear Consent Notices

Create transparent, itemized consent experiences in plain language.

Verifiable Consent

Capture consent records, timestamps, purposes, and related evidence.

Easy Consent Withdrawal

Make withdrawing consent as simple as providing it.

Children's Privacy

Support age and parental-consent workflows where applicable.

India-Specific Rules

Configure privacy and consent experiences for Indian users and DPDPA requirements.

Consent Records & Audit Trail

Maintain centralized records of consent, withdrawal, and preference changes.

DPDPA Compliance with ConsentX

Manage consent, privacy preferences, withdrawals, and compliance evidence with ConsentX.

Start Free Book a Demo

This page provides general information and is not legal advice. DPDPA applicability and obligations may vary depending on your processing activities. Consult qualified legal counsel for your specific requirements.