Data Privacy & Cyber Law Hub: Act and Framework Map: practical Indian finance and law guidance from Finin2min.
| Provision / instrument | Coverage |
|---|---|
| DPDP Act ss.1–3 | Commencement, definitions and application |
| ss.4–10 | Processing grounds and data-fiduciary obligations |
| ss.11–17 | Data-principal rights, duties and exemptions |
| ss.18–26 | Data Protection Board |
| ss.27–34 | Board powers, appeals and alternative dispute resolution |
| ss.35–44 | Government powers, penalties and consequential amendments |
| DPDP Rules, 2025 | Notices, consent manager, breach, rights, children, SDF and Board process |
| IT Act and SPDI framework | Legacy cybersecurity and sensitive-data controls during transition |
| CERT-In directions | Incident reporting, time synchronisation, logs and point of contact |
| IT Intermediary Rules | Due diligence, grievance and digital-media obligations |