Abstract
India's rapid digital transformation has revolutionized communication, governance, banking, and online services, making personal data a valuable asset. However, this growth has also increased concerns regarding data privacy, cybersecurity, government surveillance, and the misuse of personal information. The recognition of the right to privacy as a fundamental right in *Justice K.S. Puttaswamy v. Union of India* marked a significant milestone in India's constitutional framework, paving the way for the enactment of the Digital Personal Data Protection Act, 2023. This article examines the evolution of India's data protection regime, the key provisions of the Digital Personal Data Protection Act, 2023, and the legal rights and obligations it establishes. It further explores emerging challenges such as data breaches, cross-border data transfers, artificial intelligence, and social media risks, while comparing India's approach with international data protection frameworks. The article emphasizes the need for stronger enforcement mechanisms, transparent governance, responsible AI regulation, and greater public awareness to safeguard digital privacy. A balanced legal framework that promotes technological innovation while protecting constitutional rights is essential for building a secure, accountable, and privacy-respecting digital ecosystem in India.