Global Compliance Library
India
DPDP Act & Rules, IT Act, CERT-In, RBI and SEBI requirements.
DPDP Act
ConditionalDigital Personal Data Protection Act, 2023
Legislation / Act
- Authority:
- Parliament of India (administered by MeitY)
- Status:
- Enacted; commencement notified in phases
- Applies to:
- Processing of digital personal data within India, and certain processing outside India connected to offering goods or services to data principals in India.
DPDP Rules
ConditionalDigital Personal Data Protection Rules, 2025
Regulation
- Authority:
- Ministry of Electronics and Information Technology (MeitY)
- Status:
- Notified; phased commencement
- Applies to:
- Subordinate rules operationalising the DPDP Act, 2023.
IT Act
MandatoryInformation Technology Act, 2000
Legislation / Act
- Authority:
- Parliament of India
- Status:
- In force (as amended, incl. 2008); various IT Rules made under it
- Applies to:
- Electronic records, digital signatures, cyber offences and intermediary obligations in India.
CERT-In Directions
MandatoryCERT-In Directions (April 2022)
Regulatory direction
- Authority:
- Indian Computer Emergency Response Team (CERT-In), MeitY
- Status:
- In force
- Applies to:
- Service providers, intermediaries, data centres, body corporate and government organisations in India.
RBI IT Governance MD
MandatoryRBI Master Direction — IT Governance, Risk, Controls and Assurance Practices, 2023
Regulatory direction
- Authority:
- Reserve Bank of India (RBI)
- Status:
- In force
- Applies to:
- Scheduled commercial banks, small finance banks, payments banks, NBFCs, credit information companies and All India Financial Institutions (with stated exemptions).
SEBI CSCRF
MandatorySEBI Cybersecurity and Cyber Resilience Framework
Regulatory direction
- Authority:
- Securities and Exchange Board of India (SEBI)
- Status:
- In force (phased; deadlines extended)
- Applies to:
- SEBI-regulated entities (REs) across the securities market, with graded requirements by category.
This library provides general information for orientation only. It is not legal advice, a determination of applicability, or a substitute for formal certification or professional counsel. Verify current legal status, editions and dates against the official source before relying on any entry. Inclusion of a jurisdiction or instrument here is informational and does not imply that Srida IT provides regulated services, holds local authorisation, or has a presence in that jurisdiction.