The DPDP Act: What Indian Hospitals Should Know
· 4 min read
Hospitals hold some of the most sensitive information people ever share. India's Digital Personal Data Protection (DPDP) Act, 2023 sets out how organisations must handle personal data in digital form. The government notified the DPDP Rules on 14 November 2025, with an eighteen-month period for phased compliance, which runs to around May 2027.
This is a general summary, not legal advice. Please speak with a qualified adviser about your hospital.