Scholarlink

<p>The Digital Personal Data Protection Act, 2023 (DPDPA, 2023) represents India’s most comprehensive step toward building a&#xa0;rights-based and accountable data governance framework. Enacted after years of judicial deliberation and policy debate, the Act seeks to balance individual privacy, economic innovation, and state interests. This paper undertakes a&#xa0;comparative and doctrinal legal analysis of the DPDPA, examining its key provisions, legal evolution, and alignment with international standards such as the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Lei Geral de Proteção de Dados (LGPD), and China’s Personal Information Protection Law (PIPL). It evaluates how far the Indian framework advances individual rights, regulates fiduciary obligations, and ensures enforcement through the Data Protection Board of India (DPBI). The study identifies major challenges including government exemptions under Section&#xa0;18, the limited independence of the DPBI, the absence of a&#xa0;judicial oversight mechanism, and high compliance burdens for startups and small businesses. Despite these shortcomings, the DPDPA marks significant progress toward embedding privacy within India’s digital ecosystem. The paper concludes by recommending legislative refinements, stronger institutional independence, and the promotion of privacy-enhancing technologies to achieve a&#xa0;sustainable balance between data protection and digital innovation.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

The Digital Personal Data Protection Act, 2023: Analysing Its Implications, Challenges, and Future Prospects

  • 期刊论文

  • 发表日期：

    2025年11月7日

查看全文
  • Aman Sonkar

摘要

The Digital Personal Data Protection Act, 2023 (DPDPA, 2023) represents India’s most comprehensive step toward building a rights-based and accountable data governance framework. Enacted after years of judicial deliberation and policy debate, the Act seeks to balance individual privacy, economic innovation, and state interests. This paper undertakes a comparative and doctrinal legal analysis of the DPDPA, examining its key provisions, legal evolution, and alignment with international standards such as the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Lei Geral de Proteção de Dados (LGPD), and China’s Personal Information Protection Law (PIPL). It evaluates how far the Indian framework advances individual rights, regulates fiduciary obligations, and ensures enforcement through the Data Protection Board of India (DPBI). The study identifies major challenges including government exemptions under Section 18, the limited independence of the DPBI, the absence of a judicial oversight mechanism, and high compliance burdens for startups and small businesses. Despite these shortcomings, the DPDPA marks significant progress toward embedding privacy within India’s digital ecosystem. The paper concludes by recommending legislative refinements, stronger institutional independence, and the promotion of privacy-enhancing technologies to achieve a sustainable balance between data protection and digital innovation.