India’s DPDPB was passed by parliament in August 2023, adding India to the growing list of countries with unique compliance regulations.

Like other global privacy laws, the DPDPB follows seven main principles to protect individuals’ privacy rights:

  1. Consented, lawful and transparent use of personal data
  2. Purpose limitation (using data only for the specified purpose)
  3. Data minimization (collecting only that information required for the purpose)
  4. Data accuracy (ensuring data is correct and updated)
  5. Storage limitation (storing data for a restricted period, determined by its purpose)
  6. Reasonable security safeguards
  7. Accountability (through breach notification requirements and associated penalties)

Additional requirements are placed on organizations considered “significant data fiduciaries” by the central government, and the law applies cross-border to organizations processing the digital personal data of India’s civilians and residents. Failure to comply with the legislation could result in penalties of up to $61 million (5bn rupees).

Identify and secure PII on an ongoing basis to maintain compliance with India’s DPDPB

Ground Labs’ Enterprise Recon empowers companies to identify and remediate sensitive data across their entire network, including data located on workstations, servers, database systems, emails or cloud storage platforms.


Can you comply with India’s DPDPB? Conduct a complimentary sample data analysis withGround Labs to find out.

Organizations achieve DPDPB India compliance
with Ground Labs

Blog

India's DPDPB — What you need to know

India’s new Digital Personal Data Protection Bill (DPDPB) was passed into law this week. Here's what you need to know.

Blog

What’s new in India’s draft Digital Personal Data Protection Bill (DPDPB)

India's draft Digital Personal Data Protection Bill (DPDPB) was released in November 2022 for parliamentary review.