Overview

As part of the Cyber Swadhinata 2026 Online Training Programme, CyberPeace conducted an awareness and capacity-building session focused on the Digital Personal Data Protection Act, 2023 (DPDP Act) and the evolving rules governing personal data protection in India.

The session provided participants with an overview of India’s emerging data protection framework, highlighting the importance of understanding legal and regulatory requirements in an increasingly data-driven digital ecosystem. The discussion focused on how personal data is collected, processed and protected, while emphasising the role of awareness and responsible data practices in strengthening cyber resilience.

The programme was organised by Webel, in collaboration with the Cyber Security Centre of Excellence (CSCoE) and the Department of IT & Electronics, Government of West Bengal, with the session delivered by CyberPeace.

Understanding India’s Data Protection Framework

The session explored the evolution of India’s data protection landscape and the need for a comprehensive legal framework to safeguard personal data in the digital age.

Participants were introduced to key aspects of the Digital Personal Data Protection Act, 2023, including its significance in establishing principles and obligations around the processing and protection of digital personal data.

The discussion also examined the emerging DPDP Rules and their role in translating the provisions of the Act into practical requirements for organisations and stakeholders handling personal data.

Key Areas Covered

The session focused on several important aspects of India's data protection framework, including:

• Evolution of India's data protection framework and the need for dedicated legislation governing digital personal data.
• Overview of the Digital Personal Data Protection Act, 2023 and its significance for India's digital ecosystem.
• Key provisions and principles governing the processing and protection of personal data.
• Collection and processing of personal data, with emphasis on responsible and lawful data practices.
• Emerging DPDP Rules and their relevance to organisations and data-handling practices.
• Data protection and cyber resilience, highlighting the connection between responsible data management and broader cybersecurity.
• Importance of awareness and compliance in building trust among individuals, organisations and digital service providers.

Strengthening Data Protection Awareness

A key focus of the session was the understanding that data protection extends beyond regulatory compliance. As digital services continue to become an integral part of everyday life, individuals and organisations increasingly share and process sensitive personal information across multiple platforms.

Building awareness around data protection principles enables stakeholders to make more informed decisions about how personal information is collected, stored, processed and protected. It also contributes to developing a stronger culture of cybersecurity and responsible digital behaviour.

Building a Resilient Digital Ecosystem

The session reinforced the importance of integrating data protection, cybersecurity awareness and responsible digital practices into India's broader cyber resilience strategy.

Understanding the legal framework governing personal data can help organisations strengthen their internal processes, improve accountability and build greater confidence among users and stakeholders.

The programme also highlighted the importance of continued capacity building as India's data protection ecosystem evolves and new rules and practices emerge.

Conclusion

The Cyber Swadhinata 2026 session on the Digital Personal Data Protection Act, 2023 – Overview & Rules provided participants with valuable insights into India's evolving personal data protection landscape.

Through initiatives such as this, CyberPeace continues to contribute to cybersecurity awareness and capacity building by promoting greater understanding of emerging cyber laws, data protection requirements and responsible digital practices.

Protecting digital data is not only a matter of compliance—it is about building awareness, strengthening cyber resilience and protecting trust in the digital ecosystem.

‍