India's data protection law is the Digital Personal Data Protection Act, 2023, which received assent on 11 August 2023. Its Rules were notified on 13 November…
The Information Technology Act came into force on 17 October 2000. It was built for e-commerce and cybercrime, not for privacy.
The 2008 amendments, in force from 27 October 2009, made companies pay for negligently losing sensitive data and punished wrongful disclosure.
They defined sensitive personal data such as passwords, health, financial and biometric data, and required privacy policies, consent and reasonable security.
On 24 August 2017 a nine-judge bench held unanimously that privacy, including informational privacy, is protected by the Constitution.
The committee led by Justice B.N. Srikrishna reported on 27 July 2018 with a draft bill, rights for individuals and an independent regulator.
Introduced on 11 December 2019, it went to a Joint Parliamentary Committee, which proposed 81 amendments in December 2021.
The government withdrew the bill, promising a comprehensive new framework. A slimmer draft followed in November 2022.
Parliament passed it within a week of introduction and the President signed it on 11 August 2023. It was not yet in force.
On 13 November 2025, with a phased start over 18 months. The Board, definitions, penalties and an RTI change took effect at once.
MeitY's 10 February campaign focused on the safe and responsible use of AI across all 36 States and UTs.
It exists in law, but recruitment for its Chairperson and four Members was only advertised on 6 June 2026.
An order corrected the wording of Sections 9 and 10 on children's and disabled persons' data and data audits.
Registered Consent Managers can let people give, review and withdraw consent across services from one platform.
Notice, consent, security safeguards, breach reporting, children's data rules and individuals' rights are scheduled for 13 May 2027.
Check app permissions, use unique passwords and two-factor login, never share OTPs, and report fraud on 1930 or cybercrime.gov.in.
Read the complete story, FAQs and key facts.