DPDP Act guides
Plain-English guides to India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, for small businesses and online stores.
- The DPDP Act, 2023 explained for small businesses in India
A plain-English guide to India's Digital Personal Data Protection Act, 2023: who it covers, what small businesses must do, the key dates and the penalties.
7 min read - DPDP Rules 2025: key rules, timeline and what changes on 13 May 2027
A summary of the Digital Personal Data Protection Rules, 2025 for businesses: the phased timeline, notice, security, breach reporting, retention and rights.
6 min read - What a DPDP privacy notice must contain (Rule 3), with an example
The elements a privacy notice needs under section 5 of the DPDP Act and Rule 3 of the DPDP Rules 2025, with a simple structure for Indian websites and apps.
5 min read - Cookie consent in India: does the DPDP Act require a cookie banner?
Whether Indian websites need a cookie or consent banner under the DPDP Act, what valid consent looks like, and how to hold back Google Analytics and Meta Pixel.
5 min read - DPDP Act vs GDPR: 10 differences Indian businesses should know
How India's DPDP Act, 2023 differs from the EU GDPR on legal bases, consent, children, penalties, breach reporting and data transfers, in one comparison table.
5 min read - DPDP compliance checklist for small businesses (before 13 May 2027)
A practical DPDP Act checklist for Indian small businesses and online stores: data map, privacy notice, consent banner, records, security, breaches and rights requests.
6 min read - DPDP for WordPress and WooCommerce stores: a practical setup
How Indian WordPress and WooCommerce stores can prepare for the DPDP Act: what data WooCommerce collects, a privacy notice, a consent banner plugin and consent records.
5 min read