The big picture

The DPDP Act borrows the architecture of GDPR but is deliberately leaner.

Lawful bases

GDPR offers six lawful bases; DPDP centers on consent and "legitimate uses".

Cross-border transfers

DPDP uses a negative-list approach; GDPR uses adequacy decisions and SCCs.