Article · ~30 pages
The Digital Personal Data Protection Act, 2023 (Official Text)
Ministry of Electronics and Information Technology (MeitY), Government of India Free Advanced India
Read the actual law once, at least the consent and notice sections, so you are not relying on someone else's paraphrase. Section 6 spells out what counts as valid consent (free, specific, informed, unconditional) and it is shorter and plainer than most Indian statutes. Skimming the actual text takes twenty minutes and settles arguments with cofounders faster than a blog post.
- Consent must be free, specific, informed, unconditional, and given through clear affirmative action.
- The Act applies to any processing of digital personal data, not just marketing.
- Notice requirements and the right to withdraw consent sit in the same sections as consent itself.