Section-wise Explanation
A complete walkthrough of the structure of the DPDPA.
🎯 Learning Objectives
- ▸ Memorize the 8 chapters of the DPDPA
- ▸ Understand what each chapter covers
- ▸ Navigate the Act efficiently during compliance work
The 8 Chapters
The DPDPA is a concise law. It has 44 sections and a Schedule for penalties. Here is how the chapters are organized:
| Chapter | Sections | Focus Area |
|---|---|---|
| I | 1-3 | Preliminary (Definitions) |
| II | 4-15 | Obligations of Data Fiduciary & Rights of Data Principal |
| III | 16 | Cross-Border Transfer of Data |
| IV | 17 | Exemptions (State functions, research, etc.) |
| V | 18-26 | Data Protection Board of India |
| VI | 27-34 | Powers, Functions, and Procedure of the Board |
| VII | 35-38 | Alternate dispute resolution and appeals |
| VIII | 39-44 | Miscellaneous (Penalties, rule-making power) |
Chapter II (Sections 4-15) is the most important part for businesses. It contains all the compliance requirements.
📖 Glossary
- Schedule
- A section at the end of the Act that lists the specific penalties for different violations.
🔑 Key Takeaways
- Chapter I deals with definitions.
- Chapter II is the core of the Act—obligations and rights.
- Chapter V establishes penalties.
📚 Further Reading
- Digital Personal Data Protection Act 2023 — Government of India (2023)

Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...