DPDPA Playbook 2025 | Free Compliance Guide - Privacy Pillar

Guides.Frameworks. Solutions.

DPDPA Playbook

DPDPA Compliance Playbook, Simplified

Your quick-reference playbook for mastering India’s Digital Personal Data Protection Act (DPDPA). Privacy laws are evolving fast = and businesses must keep up or risk penalties and reputational harm. This guide helps you cut through the complexity, so your team can turn legal requirements into practical actions for building trust and reducing risk.

The DPDPA Playbook delivers a practical, step-by-step roadmap to compliance, combining statutory rules with real-world strategies, checklists and illustrative use cases.

What’s Inside the Playbook?

Understand roles of Data Principals, Fiduciaries, Processors and Managers
Provide access, corrections, erasure rights, and grievance handling.
Implement valid, informed, granular consent, including for children’s data
Comply with legitimate processing for employment, emergencies, and state
Notify authorities and individuals promptly of any data breaches
Learn compliance insights from banking, healthcare, retail and tech

New Jersey Data Privacy Act (NJDPA)

New Jersey Data Privacy Act (NJDPA)

Effective Date: January 15, 2025

Applicability	Consumer Rights	Penalties
100,000 consumer or 25,000+ consumers with 50% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $10,000 for 1st violation and up to $20,000 for subsequent violations

Florida Data Privacy and Security Act (FDBR)

Florida Digital Bill of Rights (FDBR)

Effective Date: July 1, 2024

Applicability	Consumer Rights	Penalties
gross annual revenue of at least $1 billion or 50% or more revenue from targeted advertising	Access, Delete, Correct, Opt-Out, Portability	Up to $50,000 per violation

Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)

Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)

Effective Date: January 1, 2026

Applicability	Consumer Rights	Penalties
35,000 consumers or 10,000+ consumers with 20%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	$10,000 per violation and between $100 – $500 for each intentional disclosure of personal data

Indiana Data Privacy Laws

Indiana Consumer Data Protection Act (INCDPA)

Effective Date: January 1, 2026

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ consumers with data 50%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Tennessee Information Protection Act (TIPA)

Tennessee Information Protection Act (TIPA)

Effective Date: July 1, 2025

Applicability	Consumer Rights	Penalties
35,000 consumer or 10,000+ consumers with 20% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Kentucky Data Privacy Laws

Kentucky Consumer Data Protection Act (KCDPA)

Effective Date: January 1, 2026

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ consumers with data 50%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Minnesota Data Privacy Laws

Minnesota Consumer Data Privacy Act (MCDPA)

Effective Date: July 31, 2025

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ consumers with data 25%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Connecticut Data Privacy Act (CTDPA)

Connecticut Data Privacy Act (CTDPA)

Effective Date: July 1, 2023

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ 25%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $500,000 per violation

Maryland Online Data Privacy Act (MODPA)

Maryland Online Data Privacy Act (MODPA)

Effective Date: Oct 1, 2025

Applicability	Consumer Rights	Penalties
35,000 consumers or 10,000+ consumers with 20%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	up to $10,000 per violation, and up to $25,000 for repeated violations

Delaware Personal Data Privacy Act (DPDPA)

Delaware Personal Data Privacy Act (DPDPA)

Effective Date: January 1, 2025

Applicability	Consumer Rights	Penalties
35,000 consumer or 10,000+ consumers with 20% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	up to $10,000 per violation

New Hampshire Privacy Act

New Hampshire Privacy Act

Effective Date: January 1, 2025

Applicability	Consumer Rights	Penalties
35,000 consumer or 10,000+ consumers with 25% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	up to $10,000 per violation

Virginia Consumer Data Privacy Act (VCDPA)

Virginia Consumer Data Privacy Act (VCDPA)

Effective Date: January 1, 2023

Applicability	Consumer Rights	Penalties
100,000 consumer or 25,000+ consumers with 50% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Texas Data Privacy and Security Act (TDPSA)

Texas Data Privacy and Security Act (TDPSA)

Effective Date: July 1, 2024

Applicability	Consumer Rights	Penalties
35,000 consumer or 10,000+ consumers with 20% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Oregon Consumer Privacy Act (OCPA)

Oregon Consumer Privacy Act (OCPA)

Effective Date: July 1, 2024

Applicability	Consumer Rights	Penalties
100,000 consumer or 25,000+ consumers with 25% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Montana Consumer Data Privacy Act (MTCDPA)

Montana Consumer Data Privacy Act (MTCDPA)

Effective Date: October 1, 2024

Applicability	Consumer Rights	Penalties
50,000 consumer or 25,000+ consumers with 25% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Not specified

Iowa Consumer Data Protection Act (ICDPA)

Iowa Consumer Data Protection Act (ICDPA)

Effective Date: January 1, 2025

Applicability	Consumer Rights	Penalties
100,000 consumer or 25,000+ consumers with 50% revenue from data sales	Access, Delete, Portability Opt-Out	Up to $7,500 per violation

Nebraska Data Privacy Act (NDPA)

Nebraska Data Privacy Act (NDPA)

Effective Date: January 1, 2025

Applicability	Consumer Rights	Penalties
Annual gross Revenue exceeding $10 million or buying/selling/sharing personal information of 50,000 or more consumers or 50%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Colorado Privacy Act (CPA)

Colorado Privacy Act (CPA)

Effective Date: July 1, 2023

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ 25%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $20,000 per violation with a total maximum penalty of $500,000

Utah Consumer Privacy Act (UCPA)

Utah Consumer Privacy Act (UCPA)

Effective Date: December 31, 2023

Applicability	Consumer Rights	Penalties
$25M revenue and 100,000 consumer or 25,000+ consumers with 50% revenue from data sales	Access, Delete, Opt-Out, Portability	Up to $7,500 per violation

California Consumer Privacy Act (CCPA)

California Consumer Privacy Act (CCPA)/CPRA

Effective Date : January 1, 2020/2023

Applicability	Consumer Rights	Penalties
$25M revenue, 50,000 consumers, or 50%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	$2,500 per violation; $7,500 for intentional violations