Spice Route Legal

spiceroutelegal

DPDPA – Analysis

Technology, Media & Telecommunications
Digital Personal Data Protection Act (DPDPA), 2023: Rights of Data Principals
Read more →
Technology, Media & Telecommunications
DPDPA – Overview of the Guidelines for Prevention and Regulation of Dark Patterns, 2023
Read more →
Technology, Media & Telecommunications
The Digital Personal Data Protection Act (DPDPA), 2023: Cross-Border Data Transfers
Read more →
Technology, Media & Telecommunications
Digital Personal Data Protection Act (DPDPA), 2023: A Guide to Grounds of Processing
Read more →
Technology, Media & Telecommunications
Data Fiduciary Obligations under the Digital Personal Data Protection Act (DPDPA), 2023
Read more →

DPDPA – Guides

Technology, Media & Telecommunications
The Digital Personal Data Protection Act (DPDPA)–Implications and Next Steps for the Financial Services Sector
Read more →
Technology, Media & Telecommunications
DPDPA – Data Protection Concerns in the Advertising Industry
Read more →
Technology, Media & Telecommunications
India’s New Digital Personal Data Protection Act (DPDPA): Processing Personal Data of Children
Read more →
Technology, Media & Telecommunications
DPDPA – Digital Data Protection Act, 2023: Rights of Data Principals
Read more →
Technology, Media & Telecommunications
DPDPA – Health Data Privacy: Key highlights of The Ayushman Bharat Ecosystem
Read more →
Technology, Media & Telecommunications
DPDPA – Data Protection in Employment and HR in India
Read more →
Technology, Media & Telecommunications
DPDPA – Consumer Protection and Personal Data: An Indian Perspective
Read more →

DPDPA – Templates and Agreements

Technology, Media & Telecommunications
DPDP – RACI Matrix
Read more →
Technology, Media & Telecommunications
DPDPA – Data Processor Due Diligence Checklist
Read more →
Technology, Media & Telecommunications
DPDPA – Data Inventory Template
Read more →
Technology, Media & Telecommunications
DPDPA – Privacy Notice Template
Read more →
Technology, Media & Telecommunications
DPDPA – Data processing agreement template
Read more →
Technology, Media & Telecommunications
DPDPA – Actor Analysis Checklist
Read more →
Technology, Media & Telecommunications
DPDPA – Action Items Checklist
Read more →

Frequently Asked Questions

In August 2023, the Indian Government enacted the Digital Personal Data Protection Act, 2023 (“DPDPA”) into law. The DPDPA is yet to be implemented, and we expect the government to announce dates for enforcement over the next few months. This update sets out our responses to some of frequently asked questions about the DPDPA.

Will businesses be provided with a transition period to ensure compliance? faq-arrow
How does the new law regulate different businesses and organisations? faq-arrow
How can I assess whether my organisation will qualify as a significant data fiduciary? faq-arrow
What obligations will be imposed on data fiduciaries? faq-arrow
Consent seemed to be the primary ground for collecting personal data in previous draft versions of the law. Will that continue to remain the case? faq-arrow
If India’s existing data protection rules already require consent to collect certain types of personal data, will businesses have to retake consent once the new law is in force? faq-arrow
Are there other grounds of processing that can be relied on? faq-arrow
Are there specific obligations on organisations that process personal data of children? faq-arrow
Will businesses have to rework privacy notices? faq-arrow
Will localisation be necessary? faq-arrow
How does the new law treat data principals’ rights, and what do businesses have to do in this regard? faq-arrow
Does the new law prescribe any specific security standards or measures for the protection of personal data? faq-arrow
What are the data breach notification obligations under the new law? faq-arrow
What sort of penalties does the new law prescribe? faq-arrow
What are the preparatory steps businesses can take? faq-arrow

Learn More
About Digital Personal Data Protection Act, 2023

Visit the Data and Privacy Hub to learn more about data privacy and protection