---
title: "What is DPDP Act 2023? Definition and Meaning in India | Vyora"
description: "The Digital Personal Data Protection Act, 2023 is India's data-protection law, setting rules for how organisations collect, use and protect personal data."
canonical_url: "https://www.vyora.ai/glossary/dpdp-act"
---

GLOSSARY · India compliance · Updated 27 October 2026

# What is DPDP Act 2023?

The Digital Personal Data Protection Act, 2023 is India's data-protection law, setting rules for how organisations collect, use and protect personal data.

Businesses that decide why and how personal data is processed are called Data Fiduciaries. They need a valid purpose and consent, must give notice, keep data secure, handle correction and erasure requests and report breaches. Penalties can run up to ₹250 crore.

Phone numbers, call recordings and transcripts are personal data. A calling platform is usually a processor acting for you, which makes the contract and the consent you hold important.

At Vyora: [Vyora has a guide to how secure AI voice agents are with customer data in India.](https://www.vyora.ai/blog/ai-voice-agent-data-security-india)

## Common questions

Are call recordings covered by the DPDP Act?

Yes, when they contain personal data, which they almost always do.

Who is responsible for consent, me or the platform?

Usually you, as the business deciding to call. Your platform helps with security and access controls.

## Related terms

-   [Consent for AI calls](https://www.vyora.ai/glossary/consent-for-ai-calls)
-   [Call recording consent](https://www.vyora.ai/glossary/call-recording-consent)
-   [Data residency](https://www.vyora.ai/glossary/data-residency)

Definitions are general information for businesses in India, not legal advice. [All glossary terms](https://www.vyora.ai/glossary) · [Try Vyora free](https://www.vyora.ai/get-started)

We use cookies to improve your experience. By continuing to use this site, you agree to our [Privacy Policy](https://www.vyora.ai/privacy-policy).