Selling to overseas users? You may be answering to two regimes.
Do you serve users outside India — the EU or the US? Then DPDP and the local regime both apply to you. Compliance with one is not compliance with the other. This hub maps how each regime lines up with DPDP.
In this cluster
Each sub-article traces to a primary source. Where the source material used here did not confirm specifics, we mark items Pending confirmation instead of guessing.
DPDP vs GDPR — A Comparison
Where DPDP and GDPR overlap (notice, consent, rights, breach, accountability) and where they diverge (lawful bases, cross-border mechanics).
ReadDPDP vs US Privacy Laws (CCPA/CPRA)
No US federal privacy law yet. CCPA/CPRA and other state laws apply based on thresholds. They overlap with DPDP on notice, access, and deletion, but use different vocabulary.
ReadEU AI Act — August 2026
What still applies and what was deferred under May 2026's Digital Omnibus. Article 50 transparency is live; Annex III high-risk obligations move to December 2027.
ReadDPDP vs GDPR, framed for AI builders
Only the points that matter when you build AI: legal basis for training, scraped public data, automated decisions, research, children, and cross-border defaults.
ReadCheck your readiness
Serving users in more than one jurisdiction? Run the readiness checklist to see your baseline DPDP coverage before adding foreign-law obligations on top.
Run it nowHow does this apply to you?
Take the 2-minute self-check to find out whether you're a Data Fiduciary, Data Processor, or both — with your personalised action checklist.
Take the DPDP Applicability CheckYour answers stay in your browser. If you choose "Email me this report", we send your email address and result type to our report service.