DPDP articles on transfers

2 articles on this site are filed here. Open any of them for the source documents behind their legal claims, with a claim type label on every source.

20 August 2026Transfers

DPDP vs GDPR: key differences for Indian businesses (2026)

DPDP and GDPR differ in machinery, and the DPDP duties compared here are not in force yet: computed commencement 13 November 2026 and 13 May 2027. Both dates are interpretation until officially confirmed. 2 grounds under section 4 against the longer list of lawful bases in GDPR Article 6(1), and fixed rupee caps in the Schedule, up to 250 crore rupees. Scope, Consent Managers, breach clocks, children's data, cross border transfers and DPIA triggers in one table, with the GDPR column given as orientation to the official EUR Lex text.

17 August 2026Transfers

Does DPDP require data localisation? Cross border transfers, and the 1 rule that does

Transfers out of India are permitted by default under Rule 15, which is not in force yet. But Rule 13(4) does impose localisation, once it commences, on Significant Data Fiduciaries for data the Central Government specifies, including the traffic data pertaining to its flow.

The provisions these articles point to

Each page carries the official text of the provision, its commencement status and the sources behind it.

Tools for this topic

Free, no login, and each one shows the provisions its answers rest on.