DPDP enforcement deadline: May 2027Rules notified Nov 2025Penalty exposure up to ₹250 Cr

Quick Answer

The DPDP Act 2023 has 40 sections. The core obligations for Data Fiduciaries are in Sections 4–17, covering consent, data principal rights, security safeguards, and Grievance Officers. The Data Protection Board is established under Sections 18–27. Penalties are set out in the Schedule. Select any section below to get a plain-language explanation.

DPDP Act 2023 Section-by-Section Guide

Plain-language guide to every DPDP Act 2023 section — what it means, who it applies to, and what you must do.

DPDP Compliance Checker

Get the Full Compliance Guide (Free)

Frequently Asked Questions

How many sections does the DPDP Act 2023 have?+
The Digital Personal Data Protection Act 2023 has 40 sections plus a Schedule setting out penalty amounts. The core data protection obligations are in Sections 4–17. The Data Protection Board provisions are in Sections 18–27.
Which section covers consent under DPDP?+
Section 6 covers consent requirements. Consent must be free, specific, informed, unconditional, and an unambiguous affirmative action. Section 5 covers the notice that must be provided before consent is collected.
What are the key sections for a Data Fiduciary?+
Primary obligations: Section 4 (lawful basis), Section 5 (notice), Section 6 (consent), Section 8 (fiduciary obligations including security and breach notification), Sections 11–14 (data principal rights). Section 9 applies if you process children's data. Section 10 applies if designated an SDF.

Related DPDP Tools

Every Sunday

The Sunday DPDP Brief

One real DPDP development explained in plain English, one practical how-to, one number from our own assessment data. Nothing else — no daily noise, no sales pitch.

No spam. Unsubscribe with one click, anytime.

Related tools & reading
DPDP Adequacy & Restricted-Country TrackerDPDP Adjudication OfficerDPDP Applicability by Company Size IndiaPrivacy Programme Maturity Report GeneratorSee all Reference & Checklists tools →📝 DPDP for Payment Aggregators📝 How to Implement Data Retention Deletion DPDP