📄 Article
✓ Link checked
India
Free
Beginner
Why we picked it DSCI is India's industry body on data security (a NASSCOM initiative), so this is about as close to a canonical plain-language reading of the Act as you get without a lawyer. Three pages, no jargon wall: it lays out who counts as a data fiduciary, the consent and notice rules, the data principal's rights (access, correction, deletion), and breach duties. Read this before you read any blog's interpretation, so you can tell which ones are getting it right.
The Digital Personal Data Protection Act, 2023: DSCI Summary
From Data Security Council of India by Data Security Council of India (DSCI) 10 min read
- The Act triggers the moment you process digital personal data, and it defines you (the collector) as the data fiduciary carrying the obligations
- Consent has to be free, specific, informed, and unambiguous through a clear affirmative act, which kills the pre-ticked box
- Data principals get enforceable rights to access, correct, and erase their data, plus grievance redressal, so your app needs to actually support deletion