The Digital Personal Data Protection Act, ______ establishes a Data Protection Board of India and imposes obligations on data fiduciaries to process personal data only for lawful purposes with consent.

DPDP Act, 2023: India's comprehensive data privacy law: (a) Scope: Applies to processing of digital personal data within India, and outside India if for offering goods/services to Indian individuals, (b) Principles: Lawful purpose, consent, data minimization, accuracy, storage limitation, security safeguards, (c) Individual rights: Access, correction, erasure, grievance redressal, right to nominate, (d) Institutional mechanism: Data Protection Board of India for adjudication, enforcement, (e) Exemptions: State functions (security, public order, research), personal/domestic use. Balances privacy rights with legitimate state/business needs; implementation rules pending.