Digital Personal Data Protection Act, 2023

Digital Personal Data Protection Act, 2023 — 100% of in-scope requirements covered.

8 requirements · 3 in scope (3 enforced) · 5 out-of-scope (outside KYE™’s authority layer). The 100% is weighted over the in-scope base.

Digital Personal Data Protection Act, 2023: requirement → the KYE™ artefact that enforces it

Demo data

You learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.

  1. PURPOSE-LIMITATION · enforced

    Personal data processed only for the purpose for which consent was given

    Audit events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1 · Constitution: 12 purpose permission

  2. ACTION-EVIDENCE · enforced

    Every consequential action on personal data is evidenced and replayable

    Audit events: kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1 · Constitution: 13 resilience loop, 30 audit worm retention

  3. ERASURE-ROUTE · enforced

    Data Principal right to erasure is routed and evidenced

    Audit events: kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1 · Constitution: 31 data governance pack, 61 rights disputes disclosure rail

  4. NOTICE-CONSENT · out-of-scope

    Itemised notice and valid consent obtained from the Data Principal

    Constitution: 12 purpose permission

  5. BREACH-INTIMATION · out-of-scope

    Personal-data breach intimated to the Board and affected Data Principals

    Constitution: 13 resilience loop

  6. SDF-OBLIGATIONS · out-of-scope

    Significant Data Fiduciary duties — DPO, independent audit, DPIA

    Constitution: 31 data governance pack

How this widget is built
Demonstrates
KYE™ Compliance Mapping Rail™
Components
  • Framework requirement (clause)
  • Coverage status
  • KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
Flow
Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
Used on

Source: The Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023), Government of India

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
Digital Personal Data Protection Act, 202383000100%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
dpdp-act-2023.PURPOSE-LIMITATIONPersonal data processed only for the purpose for which consent was givenenforcedaudit_events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1
engines: internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
dpdp-act-2023.ACTION-EVIDENCEEvery consequential action on personal data is evidenced and replayableenforcedaudit_events: kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1
engines: internal
constitution_refs: constitution/13-RESILIENCE-LOOP.md, constitution/30-AUDIT-WORM-RETENTION.md
dpdp-act-2023.ERASURE-ROUTEData Principal right to erasure is routed and evidencedenforcedagents: internal
audit_events: kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1
constitution_refs: constitution/31-DATA-GOVERNANCE-PACK.md, constitution/61-RIGHTS-DISPUTES-DISCLOSURE-RAIL.md
dpdp-act-2023.NOTICE-CONSENTItemised notice and valid consent obtained from the Data Principalout-of-scopeconstitution_refs: constitution/12-PURPOSE-PERMISSION.md
dpdp-act-2023.BREACH-INTIMATIONPersonal-data breach intimated to the Board and affected Data Principalsout-of-scopeconstitution_refs: constitution/13-RESILIENCE-LOOP.md
dpdp-act-2023.SDF-OBLIGATIONSSignificant Data Fiduciary duties — DPO, independent audit, DPIAout-of-scopeconstitution_refs: constitution/31-DATA-GOVERNANCE-PACK.md
dpdp-act-2023.CHILDREN-DATAVerifiable parental consent and no tracking or targeted advertising directed at childrenout-of-scopeconstitution_refs: constitution/12-PURPOSE-PERMISSION.md
dpdp-act-2023.CROSS-BORDERTransfer of personal data outside India subject to Government restrictionout-of-scopeconstitution_refs: constitution/30-AUDIT-WORM-RETENTION.md

Canonical KYE™ surfaces referenced on this page: KYE Protocol™.