Part 2/11:
On August 11, 2023, India notified the DPDP Act, marking a milestone in data privacy legislation. The act, along with its subsequent rules framed in November 2023, aims to regulate the collection, processing, and sharing of personal data by organizations. Unlike previous laws, the DPDP Act adopts an inclusive language emphasizing "her" and "she," signifying a progressive shift towards comprehensive privacy rights.
The legislation introduces strict compliance requirements and penalties—up to 250 crore rupees for violations—creating a compelling impetus for organizations to enhance their data management practices. Its proactive nature differs from prohibitive laws like the earlier e-gaming restrictions, emphasizing regulation and control over data handling.