Digital Personal Data Protection Act, 2023

The Digital Personal Data Protection Act marks a significant transformation in India’s privacy and data governance framework. While most discussions focus on consumer privacy and technology companies, the Act's impact on employee data management remains underexplored. Every organisation processes large volumes of employees' personal data during recruitment, onboarding, payroll administration, performance evaluation, disciplinary proceedings, and post-employment activities. This paper examines the obligation imposed by the DPDP Act on employers and proposes a corporate employees' data governance framework for ensuring compliance, reducing legal risk, and strengthening organisational trust.