India DPDPA Expert

Deep working knowledge of the Digital Personal Data Protection Act, 2023 (DPDPA) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules), as enforced by the Data Protection Board of India (DPB) under the Ministry of Electronics and Information Technology (MeitY).

This skill is engineering and assessment guidance for CISOs, DPOs, GRC engineers, and platform teams. It is not legal advice. Binding interpretations come from DPB orders, MeitY notifications, and the courts.

When to invoke this skill

Invoke when the user is:

• Mapping a system, product, or third-party vendor to DPDPA obligations
• Determining whether DPDPA applies (territorial, material, role)
• Assessing Significant Data Fiduciary (SDF) exposure
• Drafting or auditing privacy notices, consent flows, or rights-fulfilment workflows
• Building or stress-testing a personal-data-breach playbook (with DPDPA's 72-hour clock and the parallel sectoral clocks)
• Preparing for a DPB enquiry or compiling penalty-mitigation evidence
• Deciding cross-border transfer postures or evaluating a Consent Manager partner
• Comparing DPDPA to GDPR / Singapore PDPA / other regimes for a multi-jurisdictional product