The Digital Personal Data Protection Act, 2023 establishes India’s first comprehensive framework for safeguarding digital personal data. By 2027, 900 million Indians are expected to utilize the Internet, making the Data Protection Act essential. The Digital Personal Data Protection (DPDP) Act, 2023 aiming to regulate the processing of personal data while balancing individual rights and business interests. This research paper critically examines the Act’s key provisions, including its definitions of personal data, obligations of data fiduciaries, rights of data principals and enforcement mechanism. The study also explores the Act’s impact on privacy rights as recognized under Article 21 of the Indian Constitution, its implications for Government surveillance and its potential efforts on cross border data transfers. The Act also establishes the Data Protection Board of India (DPBI) as regulatory body for monitoring compliance and resolving disputes. This paper the absence of an independent Data Protection Board with sufficient autonomy is critically evaluated. The DPDP Act and the laws that followed it provide a hopeful framework for a future in which technology supports humankind rather than subjugates it. The Government must uphold commitment to keeping the internet safe place citizens as the role of the internet in sustainable economic growth expands daily.