Knowledge center
Find the right page by task or by role, and read what India's DPDP Act asks of a business in plain language.
The knowledge center helps you find your way around these pages. Look up a task, see what your role should read first, or read what India's DPDP Act asks of a business. It is for everyone, and most of it needs no technical knowledge.
Start with#
- Task finder lists what people want to do and the page for each.
- Reading lists by role gives each role its first five or six pages.
- The DPDP Act at a glance says who is who and what a business must do.
Find your way
- Task finderCommon tasks in PIEDAP Consent, grouped by area, each with a link to the page that shows how to do it.
- Reading lists by roleThe five or six pages to read first for each role, from privacy lead and marketer to developer, operator and auditor.
The DPDP Act in plain language
- The DPDP Act at a glanceWho is who under India's DPDP Act, 2023 and DPDP Rules, 2025, what a business must do, and where PIEDAP Consent helps.
- Key datesWhen each part of India's DPDP Act and DPDP Rules, 2025 starts, what each date means for a business, and the two points that are not settled.
- Notice and consentWhen India's DPDP Act lets you use personal data, what a valid notice and a valid consent need, and what to do when your purposes change.
- Existing data and retentionWhat India's DPDP Act asks about personal data collected before the Act, and how long data and logs may or must be kept.
- People's rightsWithdrawal, the rights people have under India's DPDP Act, the 90 day limit for answering, and the extra rules for children.
- Breaches and penaltiesWhat India's DPDP Act asks you to do after a personal data breach, and the most the Board may impose for each kind of failure.