DPDP Act

The Digital Personal Data Protection Act, 2023 is India's comprehensive data privacy law that governs the processing of personal data including employee and candidate information. HR departments must obtain explicit consent for collecting and processing personal data, implement data retention policies, and ensure robust cybersecurity measures for HRIS platforms. Non-compliance can result in penalties up to hundreds of crores.