UPSC Notes

Digital Personal Data Protection Act, 2023 (DPDPA)

PYQs

8

Articles

1

Momentum

21

Phase IFoundation

Background

Overview

The DPDPA is India's primary law governing data privacy, a critical aspect of digital governance, individual rights, and the regulatory environment for technology companies. Its effectiveness, challenges, and interaction with constitutional rights are key for GS2.

The Digital Personal Data Protection Act, 2023 (DPDPA) is India's comprehensive legislation enacted to protect the digital personal data of individuals. It establishes rights and duties for data principals and data fiduciaries, regulating the processing of personal data within India.

Phase IIStatic core

Facts & tables

Key facts

Purpose

To protect digital personal data and establish a framework for its processing.

Scope

Applies to the processing of digital personal data within India, and outside if it relates to offering goods/services to data principals in India.

Key Principle

Technologically agnostic, focusing on the purpose of data collection.

Limitation highlighted

Excludes publicly available information, creating a lacuna for surveillance in public spaces.

Reference table

Static syllabus anchors

TypeReference
Conceptual areaIndian Polity & Governance
Conceptual areaFundamental Rights

Reference table

Institutions & roles

BodyRole
Data Protection Board of IndiaImplements
Phase IIIExam lens

Prelims angle

Overview

Prelims angle: Multi-statement analysis

Prelims angle: Factual recall

Quick revision

  • India's primary law for digital personal data protection.
  • Follows a technologically agnostic approach.
  • Excludes data 'made publicly available,' creating regulatory gaps.
  • Challenges in addressing surveillance by new tech like smart glasses.
  • Interacts with the constitutional Right to Privacy (Article 21).

Elimination traps

Constitutional vs statutoryDPDPA is a statutory law, not a constitutional amendment, though it aims to operationalize the constitutional right to privacy.

Check if created by Constitution or by Parliament.

High-confidence PYQs

Topic timeline

Indian Polity & GovernanceFundamental Rights

Smart glasses highlight gaps in privacy laws

25 Aug 2026 · India's new data protection law, DPDPA 2023, aims to safeguard digital personal data. While technologically agnostic, it faces challenges in regulating emerging surveillance tech like smart glasses due to its exclusion of publicly available data, potentially undermining the constitutional right to privacy.

Read article

Related topics

Current topic

Digital Personal Data Protection Act, 2023 (DPDPA)

Practice writing on this topic

UPSC has asked 8 linked questions on Digital Personal Data Protection Act, 2023 (DPDPA) in Mains. Write an answer to one — and get it evaluated.

UPSC Prelims PYQs on Digital Personal Data Protection Act, 2023 (DPDPA)

Practice official previous year questions asked by UPSC related to this concept.

Editorial & Review Process

Every revision note and practice question on UPSC Practice is researched using authoritative primary sources and reviewed for factual accuracy, syllabus relevance, and exam value. Read our Editorial Policy.

Verified Quality