Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
NIST Privacy Framework 1.0 to Digital Personal Data Protection Act 2023 and Rules 2025 Crosswalk
Resource
Crosswalk (XLSX) This workbook contains 1 tab (a mapping between the NIST Privacy Framework V1.0 Core both the Digital Personal Data Protection Act 2023 and the subsequent Rules 2025).
Details
Source Name: Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025
Contributor: Nandita Rao Narla
Contributor GitHub Username: @nandita-rao
Contributor Notes:
India’s Digital Personal Data Protection Act, 2023 (enacted 11 Aug. 2023), establishes a consent-based framework for the processing of digital personal data. The Digital Personal Data Protection Rules, 2025, were notified on 14 Nov. 2025, and enforcement is phased: select provisions took effect immediately upon notification, with additional provisions kicking in 12 months later, and the remaining substantive obligations kicking in 18 months later. This crosswalk maps the NIST Privacy Framework to both the Digital Personal Data Protection Act 2023 and the subsequent Rules 2025.
Feedback on this Resource
You can share feedback, ask questions, or request clarifications about this resource. You will need the resource identifier and contributor’s GitHub username.