Ronald Philips, Advocate ABSTRACT The Digital Personal Data Protection Act, 2023 is India’s first comprehensive law on how personal data must be collected, stored and used. It came after the Supreme Court held, in K.S. Puttaswamy v. Union of India, that privacy is a fundamental right. This article looks at what the Act actually requires of companies: getting clear and specific consent from users, honouring their rights over their own data, and meeting extra obligations if a company qualifies...