An Overview of India’s Digital Personal Data Protection Act of 2023 | UpGuard

**Executive Summary:** This article analyzes India’s Digital Personal Data Protection Act (DPDP) 2023, summarizing its scope and definitions (data principals, data fiduciaries, significant data fiduciaries), the rights granted to individuals, lawful bases and conditions for processing (including special rules for children and persons with disabilities), obligations for fiduciaries and extra duties for significant fiduciaries (DPOs, audits), enumerated exemptions for certain state and law-enforcement uses, penalty factors and maximum fines for breaches, and guidance on using UpGuard’s vendor and breach risk products to help achieve compliance.