FAQ's

The Act was published in the Official Gazette on August 11, 2023. However, the specific provisions will come into force on dates notified by the Central Government. As of now, the rules are being finalized before the Act becomes fully enforceable.

Yes. Under Section 3(b), the Act applies to the processing of personal data outside India if the processing is in connection with offering goods or services to Data Principals located within India.

Penalties can be severe, reaching up to ₹250 Crores for failing to take reasonable security safeguards to prevent a personal data breach (as outlined in the Schedule).