Digital Personal Data Protection: India's Privacy Law Comes of Age
From the landmark right to privacy judgment to the 2026 amendments, India's journey toward comprehensive data protection legislation has been long and contentious.
T
The Breakdown Editorial
5 July 2026Key Takeaways
From the landmark right to privacy judgment to the 2026 amendments, India's journey toward comprehensive data protection legislation has been long and contentious.
- Supreme Court declared right to privacy a fundamental right in 2017
- DPDP Act 2023 received presidential assent after 6 years of deliberation
- 2026 amendments expanded regulatory scope and compliance requirements
- Tech companies face fines up to ₹250 crore for non-compliance
Evidence
India's DPDP Act imposes the highest data privacy fines in the world.
Strong85%Primary Sources: 1Evidence: 1 items
Supporting Evidence
- ▶While ₹250 crore is significant, EU GDPR fines can reach €20 million or 4% of global turnover, which is substantially higher for large tech firms.
Sources
View Sources →Report1
The DPDP Act exempts government agencies from all provisions.
Verified88%Primary Sources: 1Evidence: 1 items
Supporting Evidence
- ▶Section 17 of the Act allows the central government to exempt any instrumentality of the state by notification, and 15 agencies have been exempted as of 2026.
Sources
View Sources →Key Numbers
₹250 croreMaximum Fine for Non-ComplianceDPDP Act 2023
24 months from notificationImplementation TimelineMeitY
15 notified agenciesExempted Government AgenciesCentral Government Notification
Timeline
Frequently Asked Questions
Sources
Research
Related Stories
Related Entities
T