# Digital Personal Data Protection Act, 2023

> India

India's DPDP Act and its 2025 Rules impose obligations around consent, data-principal rights, breach notification and additional duties for Significant Data Fiduciaries (DPO, DPIAs, audits), with penalties up to ₹250 crore. We build a DPDP-compliant data program.

## Who needs to comply

Any organization processing the personal data of individuals in India.

## Key requirements

- **Consent & rights** - Consent management and data-principal rights workflows.
- **Breach & grievance** - Notification and grievance-redressal processes.
- **SDF obligations** - DPO, DPIAs and independent audits where you qualify as an SDF.

---
Related services: https://a5cyber.com/services/dpdp-compliance/, https://a5cyber.com/services/compliance-advisory/, https://a5cyber.com/services/iso-27001-readiness/