Chapter ISections 1–3

Preliminary

This chapter establishes the name and commencement of the Act, defines key terms like Data Principal, Data Fiduciary, and personal data breach, and outlines where the Act applies, including extraterritorial jurisdiction for businesses offering goods or services in India.

Chap. II: Obligations of Data Fiduciary→

Jump to any Section

Sec. 1Sec. 2Sec. 3Sec. 4Sec. 5Sec. 6Sec. 7Sec. 8Sec. 9Sec. 10Sec. 11Sec. 12Sec. 13Sec. 14Sec. 15Sec. 16Sec. 17Sec. 18Sec. 19Sec. 20Sec. 21Sec. 22Sec. 23Sec. 24Sec. 25Sec. 26Sec. 27Sec. 28Sec. 29Sec. 30Sec. 31Sec. 32Sec. 33Sec. 34Sec. 35Sec. 36Sec. 37Sec. 38Sec. 39Sec. 40Sec. 41Sec. 42Sec. 43Sec. 44

Sections in this Chapter

1

Section 1: Short title and commencement

Section 1 gives the Act its official name (the Digital Personal Data Protection Act, 2023) and states that the Central Government will notify when different parts of the Act come into force. Different provisions may become effective on different dates.

2

Section 2: Definitions

Section 2 provides definitions for all important terms in the Act. Key definitions include:

3

Section 3: Application of Act

Section 3 defines the territorial and material scope of the Act:

All Chapters

I. PreliminaryII. Obligations of Data FiduciaryIII. Rights and Duties of Data PrincipalIV. Special ProvisionsV. Data Protection Board of IndiaVI. Powers, Functions and Procedure to be Followed by BoardVII. Appeal and Alternate Dispute ResolutionVIII. Penalties and AdjudicationIX. Miscellaneous

Need help with DPDP compliance?

We help businesses understand and implement DPDP Act requirements. Book a free consultation.

Book a Free Consultation