The Data Privacy Laws in India: A Legal Analysis of Digital Personal Data Protection Act- 2023

The Digital Personal Data Protection Act, 2023 establishes India’s first comprehensive framework for safeguarding digital personal data. By 2027, 900 million Indians are expected to utilize the Internet, making the Data Protection Act essential. The Digital Personal Data Protection (DPDP) Act, 2023 aiming to regulate the processing of personal data while balancing individual rights and business interests. This research paper critically examines the Act’s key provisions, including its definitions of personal data, obligations of data fiduciaries, rights of data principals and enforcement mechanism. The study also explores the Act’s impact on privacy rights as recognized under Article 21 of the Indian Constitution, its implications for Government surveillance and its potential efforts on cross border data transfers. The Act also establishes the Data Protection Board of India (DPBI) as regulatory body for monitoring compliance and resolving disputes. This paper the absence of an independent Data Protection Board with sufficient autonomy is critically evaluated. The DPDP Act and the laws that followed it provide a hopeful framework for a future in which technology supports humankind rather than subjugates it. The Government must uphold commitment to keeping the internet safe place citizens as the role of the internet in sustainable economic growth expands daily.

Digital Personal Data Protection Act, Significant Data Fiduciary, digital economy, Legislative framework.

1. Singh Anu, Mishra Megha, “ The Nascence Data Privacy Laws in India: An analysis of Digital Personal Data Protection Act, 2023”, A landmark on the Indian Constitution Journal, 2024. Vol-2, Issue-1, PP- 145-150. [Google Scholar] [Crossref]

2. Singh A, Anusha, “The Digital Personal Data Protection Act.2023: An ambitious Government step towards Ensuring Its Wide Reach”. Sage Journals, 2024, Avilablehttp://Journals.sagepub.com/doi/full/10.1177/00195561241271533(Last visited on September 4th, 2025) [Google Scholar] [Crossref]

3. Kashyap Pranav, Gupota Gaurav, “Decoding India’s DPDP Act and its Impact on Business.”Available-http://bridgecounsels.com/decodingindias-dpdp-act-its-impact-on-business/. [Google Scholar] [Crossref]

4. (Last visited on September 21st , 2025) [Google Scholar] [Crossref]

5. Dalei Prabhash, “The Digital Personal Data Protection Act, 2023: A legal analysis in light of Global Data Protection Standards”, Journal-International Journal of Law, Volume-II, Issue-3, 2025, PP-127-131, ISSN-2455-2194. [Google Scholar] [Crossref]

6. Nigam Aishwarya, “ Startups and the Digital Personal Data Protection Act, 2023 and the Draft Rules 2025: Compliance and Challenges”, Journal- International Journals of Law Management & Humanities, Volume-8, Issue-5, PP-1476-1486, DOI: http://doij.org/10.10000/ULMH.1110890, ISSN-2582-5369. (Last visited on 29th Sept. 2025) [Google Scholar] [Crossref]

7. Tewari Aakanksha, “DPDPA’s Global Reach: Cross Boarder Data, AI Impact, and International Alignment, TRUSTARC. Available -http://trustarc.com/resource/dpdpas-global-reach-cross-boarder-data-ai/. [Google Scholar] [Crossref]

8. (Last visited on 04.10.2025) [Google Scholar] [Crossref]

9. Article 19(1)(a) of the Constitution of India. [Google Scholar] [Crossref]

10. Article 21 of the Constitution of India. [Google Scholar] [Crossref]

11. Article 32 and 226 of the Constitution of India. [Google Scholar] [Crossref]

12. WEB SOURCES [Google Scholar] [Crossref]

13. http://blog.ipleaders.in/supreme-courts-Judgements-right-information/. [Google Scholar] [Crossref]

14. http://datareportal.com/reports/digital-2024.india/. [Google Scholar] [Crossref]

15. http://indiankanoon.org/doc/778875/. [Google Scholar] [Crossref]

16. http://rti.gov.in/rtiact.asp/. [Google Scholar] [Crossref]

17. http://www.meity.gov.in/writereaddata/files/Digital%20 personal%20Data%20protection%20Act%202023-pdf. [Google Scholar] [Crossref]

18. (Last visited May, 20th, 2025) [Google Scholar] [Crossref]