The Digital Personal Data Protection Act, 2023 (Act 22 of 2023). Verbatim text from the Gazette of India.
Section 3 in one line
India + extraterritorial for goods/services offering; excludes personal/domestic use and self-published data
Maintainers' summary, not statutory text. The verbatim section follows.
Subject to the provisions of this Act, it shall—
(a) apply to the processing of digital personal data within the territory of India where the
personal data is collected—
(i) in digital form; or
(ii) in non-digital form and digitised subsequently;
(b) also apply to processing of digital personal data outside the territory of India, if such
processing is in connection with any activity related to offering of goods or services to Data
Principals within the territory of India;
(c) not apply to—
(i) personal data processed by an individual for any personal or domestic purpose; and
(ii) personal data that is made or caused to be made publicly available by—
(A) the Data Principal to whom such personal data relates; or
(B) any other person who is under an obligation under any law for the time being in force
in India to make such personal data publicly available.
Illustration. X, an individual, while blogging her views, has publicly made available her
personal data on social media. In such case, the provisions of this Act shall not apply.