⚡ KEY DPDPA 2023 COMPLIANCE TIPS
Consent must be free, specific, informed, unconditional, and unambiguous — bundled consent is not valid under DPDPA.
Data Fiduciaries must appoint a Data Protection Officer (DPO) who is a Key Managerial Personnel under the Companies Act.
Significant Data Fiduciaries (SDFs) face additional obligations: DPIA, data audits, and algorithmic transparency.
Cross-border data transfers are permitted unless the Central Government restricts certain countries via notification.
Penalties range from ₹50 crore to ₹250 crore per breach — non-compliance is extremely costly.
Children's data (under 18) requires verifiable parental consent and processing restrictions on behavioural monitoring.
0%
Compliance Score