Digital Personal Data Protection Act 2023

Explore India’s landmark DPDP Act 2023 and how LoanPao ensures compliance to protect your personal data in 2025. Understand your rights and our data security practices.

Contact Us

Introduction to DPDP Act 2023

Last updated: July 30, 2025. The Digital Personal Data Protection Act, 2023 (DPDP Act), enacted on August 11, 2023, is India’s first comprehensive data privacy law, safeguarding digital personal data. It establishes a framework for data fiduciaries like LoanPao to process data responsibly while ensuring user rights. The Act applies to digital data collected in India or processed for services offered in India, such as PMAY Loan applications. For details on our practices, see our Privacy Policy. Contact us at info@loanpao.in or +91-971-769-5334.

Purpose and Scope

The DPDP Act 2023 balances privacy rights with lawful data processing. It covers:

  • Digital Personal Data: Information identifying individuals (e.g., name, Aadhaar, email) collected online or digitized offline.
  • Indian Entities: Businesses like LoanPao handling data for services like Home Loans.
  • Foreign Entities: Companies offering services in India, processing Indian users’ data.
  • Exclusions: Non-digital data, publicly available data, and certain government exemptions.

Rooted in the 2017 Puttaswamy judgment, the Act recognizes privacy as a fundamental right under Article 21 of the Indian Constitution.

Key Provisions

The DPDP Act outlines obligations and rights:

  • Data Fiduciaries: Must obtain consent, ensure data accuracy, and delete data post-purpose. Significant fiduciaries, like large platforms, appoint a Data Protection Officer (DPO).
  • Data Principals: Users can access, correct, erase, or opt-out of data processing.
  • Data Protection Board: Monitors compliance, with penalties up to ₹250 crore for breaches.
  • Children’s Data: Requires parental consent for minors, with strict verification.

Draft rules from January 3, 2025, specify compliance, including 48-hour notice for data erasure.

Compliance Requirements

Data fiduciaries must follow:

DPDP Act Compliance Requirements
Requirement Description Applies To LoanPao’s Approach
Consent Explicit consent before data processing. All fiduciaries Consent via loan forms and cookie popups.
Data Security SSL/TLS, access controls, regular audits. All fiduciaries SSL for e-KYC, audits for EMI Calculator.
Data Erasure Delete data post-purpose, 48-hour notice. All fiduciaries Automated deletion after loan processing.
DPO Appoint Data Protection Officer for significant fiduciaries. Significant fiduciaries DPO contact at info@loanpao.in.

LoanPao aligns with these requirements to ensure secure data handling for services like Personal Loans.

LoanPao’s Commitment to Compliance

LoanPao implements robust measures to meet DPDP Act standards:

  • Consent Management: Clear prompts during loan applications and cookie consent.
  • Data Minimization: Collect only essential data (e.g., PAN, CIBIL score) for loan eligibility.
  • Security Protocols: SSL/TLS encryption, restricted access, and audits for data like bank statements.
  • User Rights Support: Data access, correction, or deletion via contact page.

Our practices align with RBI guidelines and the DPDP Act to protect users applying for loans like PMAY Loans.

Benefits for Users

The DPDP Act empowers you with:

  • Transparency: Clear information on how your data is used for services like EMI Calculator.
  • Control: Rights to access, correct, or delete data via +91-971-769-5334.
  • Protection: Strong safeguards against breaches, with hefty penalties for non-compliance.
  • Grievance Redressal: Access to the Data Protection Board for unresolved issues.

Explore our Privacy Policy for more details on your rights.

Challenges and Implementation

While the DPDP Act strengthens privacy, challenges include:

  • Compliance Costs: Small businesses may struggle with DPO and audit requirements.
  • Transition Period: Draft rules (open until March 5, 2025) may delay full implementation.
  • User Awareness: Educating users on rights, addressed via LoanPao’s blog resources.

LoanPao mitigates these by integrating compliance into existing processes, ensuring seamless loan services.

Future Updates

The DPDP Act’s draft rules are under consultation until March 5, 2025. LoanPao will adapt to finalized rules, ensuring compliance for services like Home Loans. Check this page or contact info@loanpao.in for updates.

Contact Us

For questions about the DPDP Act or our compliance: