India's DPDPA Compliance Made Simple - Compliance Brief

The Indian Parliament passed the Digital Personal Data Protection Act (DPDPA), 2023 in August 2023. The DPDPA will replace Section 43A of the Information Technology Act, 2000 (“IT Act”) and the Information Technology Rules (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information), 2011 (“SPDI Rules”), which have been India’s data protection framework until now. The DPDPA is the first cross-sectoral law on personal data protection in India which is for the processing of digital personal data in a manner that recognizes both the right of individuals to protect their data and the need to process such personal data for lawful purposes and matters connected therewith or incidental thereto.

Thales OneWelcome allows clients to support the entire consent lifecycle, giving end users a single view and control over all their consents, and assisting them in exercising their consumer rights regarding data privacy: the right to view, export and edit all their personal data stored within Thales OneWelcome Identity Platform at any time, as well as the right to request to freeze their accounts and delete their personal data.