The Indian Parliament recently passed the long-awaited Digital Personal Data Protection Act, 2023 (the "DPDPA") into law. As India's first comprehensive data protection law, the DPDPA will overhaul the existing patchwork of rules on personal data privacy.
The DPDPA applies across sectors to processing of digital personal data within India and has extraterritorial reach in certain circumstances. The DPDPA's provisions are expected to become effective in a phased manner.
Clifford Chance and J. Sagar Associates (JSA) have collaborated to co-author a briefing overviewing the key requirements, restrictions and rights to be aware of in DPDPA and the next steps for in-scope businesses.