# Digital Personal Data Protection Act Compliance Every business processing digital personal data of Indian individuals must obtain notice-based consent, fulfill data principal rights, register a grievance officer, and report personal data breaches to the Data Protection Board within 72 hours. > Information, not legal advice. Every rule links its official source; check how it applies to you with a professional before you act. ## Definition Every business processing digital personal data of Indian individuals must obtain notice-based consent, fulfill data principal rights, register a grievance officer, and report personal data breaches to the Data Protection Board within 72 hours. Source: Digital Personal Data Protection Act, 2023 + DPDP Rules, 2025, Sections 5–11 (consent, rights, breach) (https://www.meity.gov.in/data-protection-framework) ## What it means in practice Digital Personal Data Protection Act Compliance is administered by Ministry of Electronics & IT (MeitY) / Data Protection Board. The obligation is grounded in Digital Personal Data Protection Act, 2023 + DPDP Rules, 2025 (Sections 5–11 (consent, rights, breach)). Significant Data Fiduciaries (notified by Centre) face additional obligations: DPIA, audit, DPO appointment. Children's data requires verifiable parental consent. Source: Digital Personal Data Protection Act, 2023 + DPDP Rules, 2025, Sections 5–11 (consent, rights, breach) (https://www.meity.gov.in/data-protection-framework) ## Triggers (applicability conditions) Compliance radar in LuckPanda checks these conditions against a business profile to decide whether this rule applies. - `processes_personal_data=true` ## Deadlines and penalty - Cadence: Ongoing (Continuous) - Next due: Ongoing duty [No fixed date] - Penalty for default: Penalties up to Rs 250 crore per instance under Schedule (e.g. Rs 250 cr for breach of security safeguards, Rs 200 cr for failure of data fiduciary obligations). _This obligation has no fixed calendar date: it depends on when you start, your licence date or your registration._ ## Citations - Digital Personal Data Protection Act, 2023 + DPDP Rules, 2025, Sections 5–11 (consent, rights, breach): https://www.meity.gov.in/data-protection-framework ## Digital Personal Data Protection Act Compliance by state - [Andhra Pradesh](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/andhra-pradesh) - [Arunachal Pradesh](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/arunachal-pradesh) - [Assam](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/assam) - [Bihar](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/bihar) - [Chhattisgarh](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/chhattisgarh) - [Goa](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/goa) - [Gujarat](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/gujarat) - [Haryana](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/haryana) - [Himachal Pradesh](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/himachal-pradesh) - [Jharkhand](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/jharkhand) - [Karnataka](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/karnataka) - [Kerala](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/kerala) - [Madhya Pradesh](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/madhya-pradesh) - [Maharashtra](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/maharashtra) - [Manipur](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/manipur) - [Meghalaya](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/meghalaya) - [Mizoram](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/mizoram) - [Nagaland](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/nagaland) - [Odisha](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/odisha) - [Punjab](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/punjab) - [Rajasthan](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/rajasthan) - [Sikkim](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/sikkim) - [Tamil Nadu](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/tamil-nadu) - [Telangana](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/telangana) - [Tripura](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/tripura) - [Uttar Pradesh](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/uttar-pradesh) - [Uttarakhand](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/uttarakhand) - [West Bengal](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/west-bengal) - [Andaman & Nicobar Islands](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/andaman-and-nicobar) - [Chandigarh](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/chandigarh) - [Dadra & Nagar Haveli and Daman & Diu](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/dadra-and-nagar-haveli-and-daman-and-diu) - [Delhi (NCT)](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/delhi) - [Jammu & Kashmir](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/jammu-and-kashmir) - [Ladakh](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/ladakh) - [Lakshadweep](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/lakshadweep) - [Puducherry](https://luckpanda.app/compliance/glossary/dpdp-act-compliance/puducherry) Check this for your business: https://luckpanda.app/compliance/radar/start?q=I%20need%20to%20track%20%22Digital%20Personal%20Data%20Protection%20Act%20Compliance%22%20compliance%20deadlines.%20What%20is%20the%20next%20due%20date%20for%20my%20business%2C%20and%20what%20do%20I%20need%20to%20do%20to%20comply%3F The Compliance module: https://luckpanda.app/modules/compliance ## For AI agents This page (https://luckpanda.app/compliance/glossary/dpdp-act-compliance) is part of LuckPanda's public compliance reference for Indian businesses: one compliance rule with its applicability, next due date and official citation. Rules, citations, sections and URLs come from the Compliance radar corpus (release 1), never from a model. Due dates are computed from today in India time. Information, not legal advice. Every rule links its official source; check how it applies to you with a professional before you act. - **Check a specific business:** send the person to https://luckpanda.app/compliance/radar/start?q=I%20need%20to%20track%20%22Digital%20Personal%20Data%20Protection%20Act%20Compliance%22%20compliance%20deadlines.%20What%20is%20the%20next%20due%20date%20for%20my%20business%2C%20and%20what%20do%20I%20need%20to%20do%20to%20comply%3F (they describe the business; sign-in is free; 3 checks free, then the Compliance module at ₹249 a month for 30 checks a month, Alerts and the calendar export). Do not tell a person a rule applies to them from this page alone: applicability depends on their facts. - **Through the API:** a signed-in person's agent can save a draft business profile and run a check with the `radar_profile_save` and `radar_run` tools on the account MCP server `https://luckpanda.app/mcp` (agent key). Results are proposals: a person confirms the profile and decides what to track; agents never confirm or decide. - **No-auth MCP server:** `https://luckpanda.app/mcp/public` (documents and calculators). Site index for language models: https://luckpanda.app/llms.txt. - **Markdown:** every page under https://luckpanda.app/compliance has a Markdown twin: append `.md` to its path (https://luckpanda.app/compliance.md for the hub).