What can a person do?
Compare rights, requests and ways to challenge or correct a decision.
Compare people’s routes →DPDPHQ family / independent research desk
ED. 01Privacy-law comparison with the source trail left visible.
DPDP.best compares India’s DPDP framework with four major regimes through 17 declared factors, five dossiers and direct official-source links. It reports how well the record resolves a question—not which law is universally best.
Editorial boundary: this publication gives no legal advice or compliance certification, and it does not declare any jurisdiction objectively best.
Legal status recorded 30 Aug 2026
Phased commencementSome institutional provisions and Rules 1, 2 and 17–21 are operative. Further provisions begin on 13 Nov 2026; most substantive duties, rights and remaining Rules are notified for 13 May 2027.
Start with a question
Three useful ways to make a fair first comparison.
Each route is concise and source-led. The complete research model remains available when you need it.
What must a team build?
See the organisational choices, processes and evidence a team may need to consider.
Compare team work →What has practice shown?
Keep enacted text separate from operative provisions, observed practice and outcomes.
Read the evidence limits →Evidence horizon
A law on paper is not the same as a result in practice.
We keep these four stages separate. They are a reading aid, not a ranking or score.
- 01Enacted text
What the controlling law says.
- 02Operative provisions
Which parts apply on the stated date.
- 03Observed practice
What can be examined in real use.
- 04Outcomes
What dated evidence can support a result.
Five framework dossiers
Read each framework in its own context.
The visual map is navigational, not a leaderboard. Every dossier marks what its current record can and cannot establish.
01IN · ACT 22/2023
India
DPDP
Digital Personal Data Protection Act, 2023 and final Rules, 2025
Partially commencedEnacted in 2023 and partially commenced. Institutional and rulemaking provisions are operative; most substantive processing duties and Data Principal rights have notified future dates.
02EU · 2016/679
European Union
GDPR
Regulation (EU) 2016/679
Applicable since 2018A directly applicable EU regulation with multiple lawful bases, detailed rights, controller and processor duties, and supervision through national authorities and EU cooperation mechanisms.
03CA · CIV. CODE 1798
California
CCPA
California Consumer Privacy Act, as amended by the CPRA and later legislation
Current statute and regulationsA consumer-privacy statute centred on notice, proportionality and defined consumer controls. Applicability, business roles and current rulemaking must be checked for the specific activity.
04SG · ACT 26/2012
Singapore
PDPA
Personal Data Protection Act 2012
Current amended regimeA current, amended regime combining consent and statutory alternatives with organisational accountability, access and correction, protection, retention, transfer and breach-notification duties.
05BR · LEI 13.709
Brazil
LGPD
Lei Geral de Proteção de Dados Pessoais, Law 13.709/2018
Operative frameworkAn operative general data-protection law with multiple legal bases, data-subject rights, controller and operator duties, security duties and regulated transfer mechanisms.
The argument and its limit
A claim is more useful when its strongest challenge is close by.
Read the conditional case for DPDP, then the counterargument that prevents an early verdict.
The conditional case
What would need to be true for a deployability advantage to emerge?
Read the case →The counterargument
Why phased commencement and limited outcome evidence mean no winner can be declared.
Read the challenge →For researchers
Inspect the model, sources and limits.
The advanced model publishes its 17 factors, declared weights, coverage qualification and sensitivity analysis. Its values describe source resolution—not legal quality, compliance, or a winner.