Instead of reading the Act as one long statute, it helps to work through it the way it actually affects you — nine chapters, each covering a practical area.
Chapter I — Preliminary
Definitions, scope, and where the Act applies.
Chapter II — Obligations of Data Fiduciaries
Grounds for processing personal data, notice requirements, consent, security safeguards, retention limits, breach notification, and grievance redressal. See our full Business Obligations page.
Chapter III — Rights and Duties of Data Principals
Access, correction, updating, erasure, grievance redressal, and the right to nominate someone else. See Individual Rights.
Chapter IV — Special Provisions
Cross-border data transfer rules and specific exemptions from parts of the Act.
Chapter V — Data Protection Board of India
How the Board that oversees enforcement is established and composed.
Chapter VI — Powers and Functions of the Board
How the Board investigates complaints, issues directions, and enforces the Act.
Chapter VII — Appeals and Alternative Dispute Resolution
How organisations can appeal a Board decision, including mediation and voluntary undertakings.
Chapter VIII — Penalties and Adjudication
What non-compliance can cost. See the full Penalties breakdown.
Chapter IX — Miscellaneous
Rules, government powers, and consequential amendments to other laws.