The DPDP Handbook — India's Data Protection Field Guide

## The DPDP Handbook India's Digital Personal Data Protection Act — explained without the legalese, organised around the decisions you actually have to make, and argued industry by industry. **[Read the full interactive handbook →](/dpdp-handbook)** (Mermaid flowcharts render in-browser) **[Download HTML handbook](/dpdp-handbook?download=1)** — gated download with notice & callback consent (DPDP Sec 6) --- ## What you'll find inside 1. **Foundations** — why DPDP is not an InfoSec project 2. **What DPDP is (and isn't)** — the law in plain English 3. **The cast** — six roles you may wear 4. **Frameworks** — how DPDP converges with ISO 27001, SOC 2, and more 5. **Lawful basis** — consent vs exceptions 6. **Consent architecture** — notice, withdrawal, evidence 7. **Data principal rights** — access, correction, erasure, grievance 8. **Breach clock** — the 72-hour obligation 9. **Children & Significant Data Fiduciaries** 10. **Cross-border transfer, timeline & penalties** 11. **Case study** — the ₹60L cost overrun lesson 12. **Industry playbooks** — Tech, BFSI, Healthcare, Education, Manufacturing 13. **First 90 days** — a practical checklist --- ## Disclaimer This handbook is for informational purposes only and does not constitute legal advice. Consult a qualified legal professional for compliance decisions. --- ## Related - [Interactive DPDP Act Guide (44 sections)](/dpdp-guide) - [DPDP Platform Comparison Whitepaper](/resources/dpdp-platform-comparison-2026) - [Free DPDP Website Scanner](/dpdp-scanner)