Start here
The DPDP Act, Explained
What the Digital Personal Data Protection Act, 2023 asks of every business in India, in under a minute.
Every business in India collects personal data, from a phone number at checkout to a patient report or a KYC form. This video explains who is who under the DPDP Act, 2023: the Data Principal, the Data Fiduciary and the Data Processor.
It covers clear notices and valid consent, the rights people can use, the 90 day window for grievances, breach reporting to the Data Protection Board with a detailed report within 72 hours, penalties of up to 250 crore rupees, and the 13 May 2027 date from which core duties apply.
Key points
- Data Principal, Data Fiduciary and Data Processor
- Notice, consent and withdrawal
- Access, correction, erasure and grievances within 90 days
- Breach reporting, penalties and the 13 May 2027 date
Transcript
You collect personal data every day. A phone number at checkout, a patient report, a KYC form. The DPDP Act, 2023 sets the rules for how you collect, use and protect it. Your customer is the Data Principal. You are the Data Fiduciary. A vendor working on the data for you is a Data Processor. You need a clear notice and, in most cases, valid consent, which customers can withdraw any time. Customers can access, correct or erase their data. Grievances must be answered within 90 days. After a breach, you inform the Data Protection Board and every affected person, and file a detailed report within 72 hours. Penalties go up to 250 crore rupees. Core duties apply from 13 May 2027.
See it with your data
Show us where your personal data lives. We will show you TrustOS running on it.
A 30 minute walkthrough on Google Meet with someone who knows the Act and the product. You leave with a view of your first phase, the owners and the effort.
Or get a rollout proposal in two minutes- Step 1A 30 minute demo on Google MeetWith someone who knows the Act and the product.
- Step 2Your systems and purposesWe walk one product's personal data through TrustOS.
- Step 3A first phase you can planModules, owners and effort, written down for you to keep.