The DPDP Act, or Digital Personal Data Protection Act, was passed on 9th August 2023 and regulates the collection, use and processing of digital personal data in India. It applies to data collected in both digital and nondigital forms (and subsequently digitised), emphasising the privacy rights of data principals. The legislation outlines obligations for entities, known as data fiduciaries who collect, use and
process personal data, and aims to protect individuals’ privacy rights when their personal data is
shared with the data fiduciaries.

This resource is designed to help non-profit organisations understand and navigate the implications of the DPDP act. It covers all the key provisions of the act and how it can impact the work of your organisation. It also includes in-depth information about the processes and workflows of the DPDP Act.

This resource is recommended for anyone in the non-profit who wants to understand the DPDP Act, esp. the teams and people engaging with data.

Note: This resource does not constitute legal advice but is only intended to provide general guidance to the readers. Please consult your legal advisors/attorneys for specific legal advice personalised to your circumstances and operations.

Resource Summary:

GameChanger Law, alongside with India Partner Network, held a workshop to explain the upcoming Data Protection Law and what it means for nonprofits. The workshop aimed to help participants understand their duties regarding gathering, handling, and sharing personal data. It stressed the importance of getting proper consent and following the rules and best practices for managing data. The discussion focused on key aspects of data security, including things like controlling access, dealing with incidents, and meeting standards like Cyber Essentials and SOC 2. Attendees were encouraged to make data protection a priority and keep up with changing rules to ensure their organisations are ready for the new data protection rules. The workshop highlighted how important non-profits are in protecting people’s privacy and following the law. By raising awareness of legal requirements and promoting strong data protection practices, the session aimed to give non-profits the knowledge and tools they need to manage data effectively. The workshop aimed to encourage a culture of responsibility and following the rules when it comes to data within non-profit organisations, helping them maintain high standards of data protection and privacy.