The Digital Personal Data Protection Act (DPDPA), 2023, commonly known as the 'Privacy Law' or the 'Data Protection Law', received the Honourable President's approval on August 11, 2023. This landmark legislation focuses on ensuring accountability in handling digital personal data and emphasises the importance of explicit and transparent consent for data collection, processing, and storage. The Act represents a paradigm shift that will redefine how businesses operate by introducing stringent data protection and privacy measures that align seamlessly with global standards. 

Key highlights of the DPDPA

What our leaders have to say

Vishesh C. Chandiok"DPDPA is the big shift towards enabling India’s digital economy and its innovation ecosystem - laying the groundwork for a data-driven business environment that thrives on creating investor value, improving organisational culture and enhancing customer trust."
Vishesh C Chandiok, Chief Executive Officer, Grant Thornton Bharat

Deepankar Sanwalka"India’s privacy era ushers in fresh opportunities for businesses in the realm of technology enablement and transformation. Responsible adoption will be key towards striking a fine balance between innovation and privacy."
Deepankar Sanwalka, Senior Partner, Grant Thornton Bharat

Impact of DPDPA

The DPDP Act establishes a uniform and standardised approach to data protection. However, it will have a widespread impact on various sectors -

Financial Services
  1. Customer profiling, authentication, sensitive data
  2. Process outsourcing - fintech partnerships, data processing, product alliances
  3. Risk management - credit, AML, fraud, insurance
  4. Financial information and transaction data

Download report    To know more about the industry, click here

TMTE (Tech, Media, Telecom and Entertainment)
  1. Personal preferences and behaviour
  2. Device information and location
  3. Digital communication data and transaction data
  4. Sensitive data from online activities

To know more about the industry, click here

Consumer, Retail & E-commerce
  1. Name, address and contact numbers
  2. Consumer preferences
  3. Payment and transaction data

Download flyer    To know more about the industry, click here

Healthcare and Lifesciences
  1. Patient health records
  2. Health insurance
  3. Clinical trial data
  4. Biometric and genetic data

To know more about the industry, click here

Tourism and Hospitality
  1. Travel itinerary
  2. Payment information
  3. Reservation information
  4. Guest feedback

Transforming challenges into business opportunities

The video is playing. This video is playing in mini-player mode.

The video is playing. This video is playing in mini-player mode.

How Grant Thornton Bharat can help?

  • Develop customised approaches for different industries
  • Establish and manage Data Protection Offices
  • Implement automated tools for compliance
  • Provide guidance in data gathering to meet DPDPA’s requirements
  • Assist in streamlining data assimilation and management
  • Offer independent data audit services
  • Assist with integrating compliance into governance practices
  • Ensure airtight compliance to uphold the reputation of independent directors
  • Support Chief Information Officers and Chief Security Officers
  • Collaborate with technical experts to align IT systems with DPDPA’s requirements
  • Provide expert dispute resolution for data breaches

Digital Personal Data Protection Act (DPDPA), 2023

Digital Personal Data Protection Act (DPDPA), 2023The Act is set to have a widespread impact across various sectors, given that nearly every sector, in one way or the other, handles personal and sensitive data

Download our brochure

Report

How will the DPDP Act impact Financial Services?

The DPDP Act of 2023 aims to protect personal data, empower individuals, and enforce strict data handling standards.

Publication

Auto Byte - November 2023

Assessing Digital Personal Data Protection Act’s (DPDPA) influence on the automotive industry

Flyer

Building consumer trust through robust data protection

DPDPA marks a significant paradigm shift, emphasising stringent data protection and privacy measures that will redefine how businesses will operate.

    Frequently asked questions (FAQs)