# What is the DPDP Act, 2023?

Source: https://cloudbrain.in/glossary/dpdp-act
Last updated: 2026-11-10

The DPDP Act (Digital Personal Data Protection Act, 2023) is India's law governing how organisations collect, use and protect the digital personal data of individuals. AEC firms handle personal data of clients, staff and site workers, and using AI tools on that data must comply with the Act.

## Why does the DPDP Act, 2023 matter for architects, engineers and contractors in India?

AEC firms handle personal data of clients, staff and site workers, and using AI tools on that data must comply with the Act. It requires a lawful basis such as consent, reasonable security safeguards and respect for individuals' rights.

## What is an example of the DPDP Act, 2023?

Before uploading client contact lists to an AI tool, a firm checks that it has consent and that the tool's terms protect the data.

## Where does CloudBrain come in?

Our [AI training and governance](/services/training) service helps architecture, engineering and construction firms put this into practice. See the related terms below, or browse the full [AEC × AI glossary](/glossary).