What is the Digital Personal Data Protection Act, 2023?

The DPDP Act, 2023 is India's first comprehensive law dedicated to protecting personal data. It received presidential assent in August 2023. The Act sets out how organisations may collect, store, use and share the personal data of individuals in India, gives individuals a defined set of rights over their own data, and creates a regulator, the Data Protection Board of India, to hear complaints and impose penalties. Before this law, data protection in India was governed largely by the Information Technology Act, 2000 and rules made under it, which were narrower in scope and weaker in enforcement.