The Digital Personal Data Protection Act, 2023 applies to any business that processes personal data of people in India. The practical essentials:
- Consent notice — tell users what you collect, why, and get free, specific, informed consent.
- Purpose limitation — only use data for the stated purpose.
- Data principal rights — access, correction, erasure, and grievance redressal.
- A grievance/DPO contact on your site.
Generate a DPDP-aligned privacy notice free on Lekha. This is informational, not legal advice.