The DPDP Act is India's first comprehensive law governing the processing of digital personal data, enacted on 11 August 2023. The implementing rules were notified in November 2025, with substantive obligations rolling out in phases. It establishes consent as the primary basis for processing and creates the Data Protection Board of India as enforcer.