by
Blog
The DPDP Act, in plain English.
Short guides for the teams who ask for consent, keep records and answer requests.
DPDP Rules 2025: what starts when (and what to do before 13 May 2027)
The DPDP Rules 2025 start in three phases: 13 Nov 2025, 13 Nov 2026 and 13 May 2027. What each date means and how to use the time left.
What valid consent looks like under the DPDP Act
Under the DPDP Act, consent must be free, specific, informed, unconditional and unambiguous, given by a clear action. A plain checklist.
Paper consent is still personal data under the DPDP Act
The DPDP Act covers data collected on paper and digitised later. What that means for field programs, NGOs, health camps and CSR work.
DPDP breach notification: telling people and the Board within 72 hours
Rule 7 of the DPDP Rules: tell affected people and the Board without delay, and send a detailed report within 72 hours.
Children's data under DPDP: verifiable parental consent explained
Section 9 and Rule 10 explained: who counts as a child, how to verify a parent, DigiLocker tokens, Fourth Schedule exemptions and guardians.
Consent notices in 22 Indian languages: what the DPDP Act asks for
The DPDP Act lets people read notices and consent requests in English or any of the 22 Eighth Schedule languages. The list, and how to translate well.