{"id":1396,"date":"2025-11-25T08:48:19","date_gmt":"2025-11-25T08:48:19","guid":{"rendered":"https:\/\/pierag.com\/?p=1396"},"modified":"2026-10-09T09:57:30","modified_gmt":"2026-10-09T09:57:30","slug":"dpdp-act-decoded-applicability-impact-our-pov","status":"publish","type":"post","link":"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/","title":{"rendered":"DPDP Act Decoded- Applicability, Impact &#038; Our Perspective"},"content":{"rendered":"<article class=\"text-token-text-primary w-full focus:outline-none [--shadow-height:45px] has-data-writing-block:pointer-events-none has-data-writing-block:-mt-(--shadow-height) has-data-writing-block:pt-(--shadow-height) [&amp;:has([data-writing-block])&gt;*]:pointer-events-auto scroll-mt-(--header-height)\" dir=\"auto\" tabindex=\"-1\" data-turn-id=\"e92bdc81-b818-48c2-9a64-f33a72d1cd8f\" data-testid=\"conversation-turn-7\" data-scroll-anchor=\"false\" data-turn=\"user\"><\/article>\n<article class=\"text-token-text-primary w-full focus:outline-none [--shadow-height:45px] has-data-writing-block:pointer-events-none has-data-writing-block:-mt-(--shadow-height) has-data-writing-block:pt-(--shadow-height) [&amp;:has([data-writing-block])&gt;*]:pointer-events-auto scroll-mt-[calc(var(--header-height)+min(200px,max(70px,20svh)))]\" dir=\"auto\" tabindex=\"-1\" data-turn-id=\"request-WEB:764cda77-ba38-48ea-9370-91d3458d550a-18\" data-testid=\"conversation-turn-8\" data-scroll-anchor=\"true\" data-turn=\"assistant\">\n<div class=\"text-base my-auto mx-auto pb-10 [--thread-content-margin:--spacing(4)] @w-sm\/main:[--thread-content-margin:--spacing(6)] @w-lg\/main:[--thread-content-margin:--spacing(16)] px-(--thread-content-margin)\">\n<div class=\"[--thread-content-max-width:40rem] @w-lg\/main:[--thread-content-max-width:48rem] mx-auto max-w-(--thread-content-max-width) flex-1 group\/turn-messages focus-visible:outline-hidden relative flex w-full min-w-0 flex-col agent-turn\" tabindex=\"-1\">\n<div class=\"flex max-w-full flex-col grow\">\n<div class=\"min-h-8 text-message relative flex w-full flex-col items-end gap-2 text-start break-words whitespace-normal [.text-message+&amp;]:mt-1\" dir=\"auto\" data-message-author-role=\"assistant\" data-message-id=\"3c61c0cc-17b5-4c3d-ada9-5a23537160d6\" data-message-model-slug=\"gpt-5-2\">\n<div class=\"flex w-full flex-col gap-1 empty:hidden first:pt-[1px]\">\n<div class=\"markdown prose dark:prose-invert w-full wrap-break-word light markdown-new-styling\">\n<article class=\"text-token-text-primary w-full focus:outline-none [--shadow-height:45px] has-data-writing-block:pointer-events-none has-data-writing-block:-mt-(--shadow-height) has-data-writing-block:pt-(--shadow-height) [&amp;:has([data-writing-block])&gt;*]:pointer-events-auto scroll-mt-(--header-height)\" dir=\"auto\" tabindex=\"-1\" data-turn-id=\"e92bdc81-b818-48c2-9a64-f33a72d1cd8f\" data-testid=\"conversation-turn-7\" data-scroll-anchor=\"false\" data-turn=\"user\"><\/article>\n<article class=\"text-token-text-primary w-full focus:outline-none [--shadow-height:45px] has-data-writing-block:pointer-events-none has-data-writing-block:-mt-(--shadow-height) has-data-writing-block:pt-(--shadow-height) [&amp;:has([data-writing-block])&gt;*]:pointer-events-auto scroll-mt-[calc(var(--header-height)+min(200px,max(70px,20svh)))]\" dir=\"auto\" tabindex=\"-1\" data-turn-id=\"request-WEB:764cda77-ba38-48ea-9370-91d3458d550a-18\" data-testid=\"conversation-turn-8\" data-scroll-anchor=\"true\" data-turn=\"assistant\">\n<div class=\"text-base my-auto mx-auto pb-10 [--thread-content-margin:--spacing(4)] @w-sm\/main:[--thread-content-margin:--spacing(6)] @w-lg\/main:[--thread-content-margin:--spacing(16)] px-(--thread-content-margin)\">\n<div class=\"[--thread-content-max-width:40rem] @w-lg\/main:[--thread-content-max-width:48rem] mx-auto max-w-(--thread-content-max-width) flex-1 group\/turn-messages focus-visible:outline-hidden relative flex w-full min-w-0 flex-col agent-turn\" tabindex=\"-1\">\n<div class=\"flex max-w-full flex-col grow\">\n<div class=\"min-h-8 text-message relative flex w-full flex-col items-end gap-2 text-start break-words whitespace-normal [.text-message+&amp;]:mt-1\" dir=\"auto\" data-message-author-role=\"assistant\" data-message-id=\"3c61c0cc-17b5-4c3d-ada9-5a23537160d6\" data-message-model-slug=\"gpt-5-2\">\n<div class=\"flex w-full flex-col gap-1 empty:hidden first:pt-[1px]\">\n<div class=\"markdown prose dark:prose-invert w-full wrap-break-word light markdown-new-styling\">\n<p><span style=\"font-weight: 400;\">The notification of the Digital Personal Data Protection Rules 2025 represents a decisive shift in India&#8217;s data privacy and governance landscape, operationalising the Digital Personal Data Protection Act 2023 and establishing a comprehensive framework for how organisations must collect, process, store, retain, and share digital personal data. The Rules introduce stringent expectations around consent management, user rights enablement, breach notification, cross-border data transfers, vendor oversight, and enhanced security safeguards. For organisations, this is not merely a regulatory change. It is a strategic and operational transformation that requires structured and immediate action. The DPDP Act received Presidential assent on 11 August 2023, and the Rules were officially notified on 13 November 2025, beginning an 18-month phased compliance rollout. [1][2]<\/span><\/p>\n<p><a href=\"https:\/\/pierag.com\/wp-content\/uploads\/2026\/09\/DPDP-Act-pov.pdf\"><span style=\"font-weight: 400;\">Download the Pierag DPDP Act POV: Applicability, Impact and Our Perspective (PDF)<\/span><\/a><\/p>\n<h2>Who Does the DPDP Act Apply To?<\/h2>\n<p><span style=\"font-weight: 400;\">The DPDP Act applies in two scenarios. [1] First, processing of digital personal data within India, whether by Indian entities or foreign entities with a physical or digital presence. Second, processing outside India where it is connected to offering goods or services to individuals within India. This extraterritorial scope means any organisation, anywhere in the world, that processes data of Indian residents is potentially subject to the Act. Data processed for personal or domestic purposes and data made publicly available are excluded from scope.<\/span><\/p>\n<h2>Key Roles: Data Principals, Data Fiduciaries, and Significant Data Fiduciaries<\/h2>\n<p><b>Data Principal<\/b><span style=\"font-weight: 400;\"> is any individual whose personal data is being processed, with rights including access, correction, erasure, withdrawal of consent, and grievance redressal.<\/span><\/p>\n<p><b>Data Fiduciary<\/b><span style=\"font-weight: 400;\"> is any entity that determines the purpose and means of processing personal data. Data Fiduciaries bear the primary compliance obligations under the Act and Rules, including consent management, security safeguards, breach notification, and data retention and erasure. [2]<\/span><\/p>\n<p><b>Significant Data Fiduciary (SDF)<\/b><span style=\"font-weight: 400;\"> is a category designated by the Central Government based on the volume and sensitivity of data processed, potential risk, and national security considerations. SDFs face enhanced obligations including mandatory Data Protection Officers, independent annual audits, and Data Protection Impact Assessments. [2]<\/span><\/p>\n<h2>Core Compliance Obligations<\/h2>\n<p><b>Consent.<\/b><span style=\"font-weight: 400;\"> Data Fiduciaries must issue a clear, separate consent notice for each specific purpose of data collection. Consent must be freely given, specific, informed, unconditional, and signified through affirmative action. Withdrawal must be as easy as giving consent. [2]<\/span><\/p>\n<p><b>Security safeguards.<\/b><span style=\"font-weight: 400;\"> Organisations must implement appropriate technical and organisational measures to prevent personal data breaches, including maintaining access logs and governance structures appropriate to their scale and risk profile.<\/span><\/p>\n<p><b>Breach notification.<\/b><span style=\"font-weight: 400;\"> When a personal data breach occurs, the Data Fiduciary must notify the Data Protection Board of India and all affected Data Principals within 72 hours of identification. [3] The notification must explain what happened, what data was exposed, potential impact, and remediation steps taken. Failure to notify carries penalties of up to INR 200 crore per incident.<\/span><\/p>\n<p><b>Data retention and erasure.<\/b><span style=\"font-weight: 400;\"> Personal data must be erased once the purpose for which it was collected is fulfilled. Data Fiduciaries must notify Data Principals at least 48 hours before completing erasure.<\/span><\/p>\n<p><b>Children&#8217;s data.<\/b><span style=\"font-weight: 400;\"> Processing personal data of individuals under 18 requires verifiable parental consent, with approved verification methods including DigiLocker integration. [3]<\/span><\/p>\n<p><b>Penalties.<\/b><span style=\"font-weight: 400;\"> Violations carry penalties of up to INR 250 crore per instance for Data Fiduciaries and up to INR 10,000 for Data Principals who violate their own obligations. [1]<\/span><\/p>\n<h2>What Organisations Must Do During the 18-Month Compliance Window?<\/h2>\n<p><span style=\"font-weight: 400;\">The phased implementation timelines emphasise the need for early readiness planning to mitigate compliance gaps, reputational risks, and regulatory penalties. Priority actions include conducting enterprise-wide personal data discovery and mapping, redesigning consent and user rights workflows, automating retention and erasure mechanisms, building 72-hour breach response protocols, strengthening audit trails, and formally designating Data Protection Officers where required as an SDF. [4]<\/span><\/p>\n<p><span style=\"font-weight: 400;\">As data continues to become central to digital transformation and customer engagement, aligning with the DPDP Rules 2025 will be critical to building trust, ensuring regulatory resilience, and enabling responsible data-driven growth.<\/span><\/p>\n<p><a href=\"https:\/\/pierag.com\/our-services\/technology-risk-advisory\/\"><span style=\"font-weight: 400;\">Pierag&#8217;s Technology Risk Advisory practice<\/span><\/a><span style=\"font-weight: 400;\"> supports organisations in assessing DPDP compliance gaps, designing data governance frameworks, and implementing the technical and organisational controls required under the Act and 2025 Rules.<\/span><\/p>\n<h2>Frequently Asked Questions<\/h2>\n<h3>When did the DPDP Act come into force?<\/h3>\n<p><span style=\"font-weight: 400;\">Presidential assent was received on 11 August 2023. The DPDP Rules 2025 were notified on 13 November 2025, beginning an 18-month phased compliance rollout. [1][2]<\/span><\/p>\n<h3>Does the DPDP Act apply to foreign companies?<\/h3>\n<p><span style=\"font-weight: 400;\">Yes. The Act applies extraterritorially to any entity processing digital personal data in connection with offering goods or services to individuals in India. [1]<\/span><\/p>\n<h3>What is a Significant Data Fiduciary?<\/h3>\n<p><span style=\"font-weight: 400;\">A category designated by the Central Government based on data volume, sensitivity, and associated risk. SDFs must appoint Data Protection Officers, conduct independent audits, and perform Data Protection Impact Assessments. [2]<\/span><\/p>\n<h3>What are the penalties for non-compliance?<\/h3>\n<p><span style=\"font-weight: 400;\">Up to INR 250 crore per instance for Data Fiduciaries. Failure to notify a breach within 72 hours carries penalties of up to INR 200 crore per incident. [1][3]<\/span><\/p>\n<h2>References<\/h2>\n<p><b>[1]<\/b><span style=\"font-weight: 400;\"> University of Arizona, Privacy Office. (2023). <\/span><i><span style=\"font-weight: 400;\">India Digital Personal Data Protection Act: Overview, applicability and penalties<\/span><\/i><span style=\"font-weight: 400;\">. Retrieved from <\/span><a href=\"https:\/\/privacy.arizona.edu\/international-data-privacy\/india-digital-personal-data-protection-act-dpdp-act\"><span style=\"font-weight: 400;\">https:\/\/privacy.arizona.edu\/international-data-privacy\/india-digital-personal-data-protection-act-dpdp-act<\/span><\/a><\/p>\n<p><b>[2]<\/b><span style=\"font-weight: 400;\"> Lexology. (2025, December 1). <\/span><i><span style=\"font-weight: 400;\">Digital Personal Data Protection Rules 2025: Operationalising consent, security, and governance obligations<\/span><\/i><span style=\"font-weight: 400;\">. Retrieved from <\/span><a href=\"https:\/\/www.lexology.com\/library\/detail.aspx?g=7e3af947-10aa-4712-bc1e-54179a613409\"><span style=\"font-weight: 400;\">https:\/\/www.lexology.com\/library\/detail.aspx?g=7e3af947-10aa-4712-bc1e-54179a613409<\/span><\/a><\/p>\n<p><b>[3]<\/b><span style=\"font-weight: 400;\"> Seclore. (2026, March 20). <\/span><i><span style=\"font-weight: 400;\">DPDP Rules 2025: India&#8217;s complete compliance guide<\/span><\/i><span style=\"font-weight: 400;\">. Retrieved from <\/span><a href=\"https:\/\/www.seclore.com\/fundamentals\/dpdp-rules-2025-compliance-guide\/\"><span style=\"font-weight: 400;\">https:\/\/www.seclore.com\/fundamentals\/dpdp-rules-2025-compliance-guide\/<\/span><\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>3-4Min Read<\/p>\n","protected":false},"author":1,"featured_media":1410,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,5],"tags":[],"class_list":["post-1396","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-insights","category-povs"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>India DPDP Act for US Companies: Compliance Guide | Pierag<\/title>\n<meta name=\"description\" content=\"Doing business in India? Learn how the DPDP Act 2023 and 2025 Rules apply to US companies: consent, data fiduciary duties, breach notice and penalties.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"India DPDP Act for US Companies: Compliance Guide | Pierag\" \/>\n<meta property=\"og:description\" content=\"Doing business in India? Learn how the DPDP Act 2023 and 2025 Rules apply to US companies: consent, data fiduciary duties, breach notice and penalties.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/\" \/>\n<meta property=\"og:site_name\" content=\"Pierag\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-25T08:48:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-09T09:57:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pierag.com\/US\/wp-content\/uploads\/2025\/11\/B1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1440\" \/>\n\t<meta property=\"og:image:height\" content=\"377\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Pierag_us_2026\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Pierag_us_2026\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/dpdp-act-decoded-applicability-impact-our-pov\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/dpdp-act-decoded-applicability-impact-our-pov\\\/\"},\"author\":{\"name\":\"Pierag_us_2026\",\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/#\\\/schema\\\/person\\\/6ba55ddb3ff7b08ffad1c3290aec6028\"},\"headline\":\"DPDP Act Decoded- Applicability, Impact &#038; Our Perspective\",\"datePublished\":\"2025-11-25T08:48:19+00:00\",\"dateModified\":\"2026-10-09T09:57:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/dpdp-act-decoded-applicability-impact-our-pov\\\/\"},\"wordCount\":870,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/dpdp-act-decoded-applicability-impact-our-pov\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pierag.com\\\/US\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/B1.png\",\"articleSection\":[\"Insights\",\"Povs\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/pierag.com\\\/US\\\/dpdp-act-decoded-applicability-impact-our-pov\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/dpdp-act-decoded-applicability-impact-our-pov\\\/\",\"url\":\"https:\\\/\\\/pierag.com\\\/US\\\/dpdp-act-decoded-applicability-impact-our-pov\\\/\",\"name\":\"India DPDP Act for US Companies: Compliance Guide | Pierag\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/dpdp-act-decoded-applicability-impact-our-pov\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/dpdp-act-decoded-applicability-impact-our-pov\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pierag.com\\\/US\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/B1.png\",\"datePublished\":\"2025-11-25T08:48:19+00:00\",\"dateModified\":\"2026-10-09T09:57:30+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/#\\\/schema\\\/person\\\/6ba55ddb3ff7b08ffad1c3290aec6028\"},\"description\":\"Doing business in India? Learn how the DPDP Act 2023 and 2025 Rules apply to US companies: consent, data fiduciary duties, breach notice and penalties.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/dpdp-act-decoded-applicability-impact-our-pov\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/pierag.com\\\/US\\\/dpdp-act-decoded-applicability-impact-our-pov\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/dpdp-act-decoded-applicability-impact-our-pov\\\/#primaryimage\",\"url\":\"https:\\\/\\\/pierag.com\\\/US\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/B1.png\",\"contentUrl\":\"https:\\\/\\\/pierag.com\\\/US\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/B1.png\",\"width\":1440,\"height\":377},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/dpdp-act-decoded-applicability-impact-our-pov\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/pierag.com\\\/US\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DPDP Act Decoded- Applicability, Impact &#038; Our Perspective\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/#website\",\"url\":\"https:\\\/\\\/pierag.com\\\/US\\\/\",\"name\":\"Pierag US\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/pierag.com\\\/US\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/pierag.com\\\/US\\\/#\\\/schema\\\/person\\\/6ba55ddb3ff7b08ffad1c3290aec6028\",\"name\":\"Pierag_us_2026\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/09ebbb4ea863da6d6a0a6be05ab4011d8ebc2cfaa57d7530885e1d2022b588d7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/09ebbb4ea863da6d6a0a6be05ab4011d8ebc2cfaa57d7530885e1d2022b588d7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/09ebbb4ea863da6d6a0a6be05ab4011d8ebc2cfaa57d7530885e1d2022b588d7?s=96&d=mm&r=g\",\"caption\":\"Pierag_us_2026\"},\"sameAs\":[\"https:\\\/\\\/pierag.com\\\/US\"],\"url\":\"https:\\\/\\\/pierag.com\\\/US\\\/author\\\/pierag_us_2026\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"India DPDP Act for US Companies: Compliance Guide | Pierag","description":"Doing business in India? Learn how the DPDP Act 2023 and 2025 Rules apply to US companies: consent, data fiduciary duties, breach notice and penalties.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/","og_locale":"en_US","og_type":"article","og_title":"India DPDP Act for US Companies: Compliance Guide | Pierag","og_description":"Doing business in India? Learn how the DPDP Act 2023 and 2025 Rules apply to US companies: consent, data fiduciary duties, breach notice and penalties.","og_url":"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/","og_site_name":"Pierag","article_published_time":"2025-11-25T08:48:19+00:00","article_modified_time":"2026-10-09T09:57:30+00:00","og_image":[{"width":1440,"height":377,"url":"https:\/\/pierag.com\/US\/wp-content\/uploads\/2025\/11\/B1.png","type":"image\/png"}],"author":"Pierag_us_2026","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Pierag_us_2026","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/#article","isPartOf":{"@id":"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/"},"author":{"name":"Pierag_us_2026","@id":"https:\/\/pierag.com\/US\/#\/schema\/person\/6ba55ddb3ff7b08ffad1c3290aec6028"},"headline":"DPDP Act Decoded- Applicability, Impact &#038; Our Perspective","datePublished":"2025-11-25T08:48:19+00:00","dateModified":"2026-10-09T09:57:30+00:00","mainEntityOfPage":{"@id":"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/"},"wordCount":870,"commentCount":0,"image":{"@id":"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/#primaryimage"},"thumbnailUrl":"https:\/\/pierag.com\/US\/wp-content\/uploads\/2025\/11\/B1.png","articleSection":["Insights","Povs"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/","url":"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/","name":"India DPDP Act for US Companies: Compliance Guide | Pierag","isPartOf":{"@id":"https:\/\/pierag.com\/US\/#website"},"primaryImageOfPage":{"@id":"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/#primaryimage"},"image":{"@id":"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/#primaryimage"},"thumbnailUrl":"https:\/\/pierag.com\/US\/wp-content\/uploads\/2025\/11\/B1.png","datePublished":"2025-11-25T08:48:19+00:00","dateModified":"2026-10-09T09:57:30+00:00","author":{"@id":"https:\/\/pierag.com\/US\/#\/schema\/person\/6ba55ddb3ff7b08ffad1c3290aec6028"},"description":"Doing business in India? Learn how the DPDP Act 2023 and 2025 Rules apply to US companies: consent, data fiduciary duties, breach notice and penalties.","breadcrumb":{"@id":"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/#primaryimage","url":"https:\/\/pierag.com\/US\/wp-content\/uploads\/2025\/11\/B1.png","contentUrl":"https:\/\/pierag.com\/US\/wp-content\/uploads\/2025\/11\/B1.png","width":1440,"height":377},{"@type":"BreadcrumbList","@id":"https:\/\/pierag.com\/US\/dpdp-act-decoded-applicability-impact-our-pov\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/pierag.com\/US\/"},{"@type":"ListItem","position":2,"name":"DPDP Act Decoded- Applicability, Impact &#038; Our Perspective"}]},{"@type":"WebSite","@id":"https:\/\/pierag.com\/US\/#website","url":"https:\/\/pierag.com\/US\/","name":"Pierag US","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/pierag.com\/US\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/pierag.com\/US\/#\/schema\/person\/6ba55ddb3ff7b08ffad1c3290aec6028","name":"Pierag_us_2026","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/09ebbb4ea863da6d6a0a6be05ab4011d8ebc2cfaa57d7530885e1d2022b588d7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/09ebbb4ea863da6d6a0a6be05ab4011d8ebc2cfaa57d7530885e1d2022b588d7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/09ebbb4ea863da6d6a0a6be05ab4011d8ebc2cfaa57d7530885e1d2022b588d7?s=96&d=mm&r=g","caption":"Pierag_us_2026"},"sameAs":["https:\/\/pierag.com\/US"],"url":"https:\/\/pierag.com\/US\/author\/pierag_us_2026\/"}]}},"_links":{"self":[{"href":"https:\/\/pierag.com\/US\/wp-json\/wp\/v2\/posts\/1396","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pierag.com\/US\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pierag.com\/US\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pierag.com\/US\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pierag.com\/US\/wp-json\/wp\/v2\/comments?post=1396"}],"version-history":[{"count":3,"href":"https:\/\/pierag.com\/US\/wp-json\/wp\/v2\/posts\/1396\/revisions"}],"predecessor-version":[{"id":2195,"href":"https:\/\/pierag.com\/US\/wp-json\/wp\/v2\/posts\/1396\/revisions\/2195"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pierag.com\/US\/wp-json\/wp\/v2\/media\/1410"}],"wp:attachment":[{"href":"https:\/\/pierag.com\/US\/wp-json\/wp\/v2\/media?parent=1396"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pierag.com\/US\/wp-json\/wp\/v2\/categories?post=1396"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pierag.com\/US\/wp-json\/wp\/v2\/tags?post=1396"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}