India Digital Personal Data Protection Act (DPDPA) 2023 is now actively enforced following the appointment of the Data Protection Board.

For India 100,000+ registered tech startups, this is the most significant compliance obligation since GST — with penalties up to Rs 250 crore per violation.

Key requirements: Explicit consent for each data processing purpose. Data minimization — collect only what you need.