India DPDP Act
What is India DPDP Act?
Digital Personal Data Protection Act of India. It comprises 8 controls organised across 8 domains, and applies in India.
How India DPDP Act maps to other frameworks
All 8 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 8 domains India DPDP Act groups its controls into
Frameworks that share controls with India DPDP Act
Each of these has at least one control mapped to a control in India DPDP Act. The number is how many India DPDP Act controls are shared, counted from the mapping graph.
Bahrain PDPL
5 shared controlsPrivacy Act 1988 (Australia)
5 shared controlsLaw No. 172-13 on the Protection of Personal Data
5 shared controlsFTC GLBA Safeguards Rule (16 CFR Part 314)
5 shared controlsFERPA
5 shared controlsAPPI
4 shared controlsPakistan Personal Data Protection Bill 2023
4 shared controlsBarbados Data Protection Act 2019
4 shared controlsWhere India DPDP Act overlaps with the standards you already hold
What India DPDP Act means in your sector
What India DPDP Act means for your job
Questions people ask about India DPDP Act
What is India DPDP Act?
How many controls does India DPDP Act have?
Where does India DPDP Act apply?
What frameworks does India DPDP Act map to?
How do I get started with India DPDP Act compliance?
Query India DPDP Act programmatically
India DPDP Act, its 8 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
India DPDP Act API reference and MCP config →What India DPDP Act requires, control by control
Each page carries the requirement text for one India DPDP Act control and what an assessor expects to see as evidence.
- DPDP-CROSSBORDER-TRANSFER-BREACH-NOTIFICATION-SEC16-SEC17-DPBI-72HOUR-IT-ACT-COORD DPDP Act Sections 16-17 + Cross-Border Personal Data Transfer + Negative List Approach + Personal Data Breach Notification to DPBI 72 Hours + Cooperation with Adjudication + Coord with CERT-In + IT Act 43A Repeal
- DPDP-DATAPRINCIPALRIGHTS-SEC11TO14-ACCESS-CORRECTION-ERASURE-GRIEVANCE-NOMINATE-WITHDRAW DPDP Act Sections 11-14 + Data Principal Rights + Access + Correction + Erasure + Grievance Redressal + Right to Nominate + Withdraw Consent + Duties + Verification of Identity
- DPDP-DPBI-ENFORCEMENT-PENALTIES-VOLUNTARYUNDERTAKING-APPEALS-SEC18TO42-INR250CR-TDSAT DPDP Act Sections 18-42 + Data Protection Board of India (DPBI) + Enforcement + Penalties up to INR 250 Crore + Voluntary Undertaking + Appeals to TDSAT + Adjudication + Schedule + DPO Coordination
- DPDP-SCOPE-2023-SEC5-NOTICECONSENT-LAWFULPROCESSING-PURPOSELIMITATION-DATAMINIMISATION DPDP Act Sections 4-7 + Notice + Consent + Lawful Processing + Purpose Limitation + Data Minimisation + Legitimate Uses + Sec 4 Lawful Use + Sec 5 Notice + Sec 6 Consent + Sec 7 Legitimate Uses
- DPDP-SIGNIFICANTDATAFIDUCIARY-SDF-SEC10-DPO-INDEPENDENTAUDITOR-DPIA-ALGORITHMIC DPDP Act Sections 10-11 + Significant Data Fiduciary (SDF) + Data Protection Officer + Independent Data Auditor + DPIA + Algorithmic Software Audit + Privacy by Design + Records of Processing Activities
How ready are you for India DPDP Act?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.