On 24 August 2017, the Supreme Court of India delivered its landmark verdict on the Right to Privacy. In the case of Justice K. S. Puttaswamy (Retd.) and Anr. vs Union of India and Ors., the Court ruled that the Right to Privacy is a fundamental right under Article 21 and Part III of the Indian Constitution.

Following this ruling, the Government of India began working on a data protection framework, laying the groundwork for legislation in response to the Supreme Court's privacy judgment.

On 22 December 2018, the government established a committee of experts, led by Justice B.N. Srikrishna, to deliberate on a comprehensive data protection framework for India.

The expert committee sought public feedback on various white papers regarding the data protection framework and released the draft of the Personal Data Protection Bill, 2018.

In August 2018, the Ministry of Electronics and Information Technology (MeitY) requested feedback on the Draft Personal Data Protection Bill.

On 4 December 2019, after further discussions, the Bill was approved by the Indian Cabinet. The Personal Data Protection Bill, 2019 was introduced in the Lok Sabha on 11 December 2019 and referred to a Joint Parliamentary Committee for review.

On 16 December 2021, the Standing Committee submitted its report on the bill. However, on 3 August 2022, the Personal Data Protection Bill, 2019 was withdrawn.

On 18 November 2022, the Ministry of Electronics and Information Technology released a new draft of the data protection framework for public consultation.

On 3 August 2023, the Digital Personal Data Protection Bill, 2023 was introduced in the Lok Sabha, and it was passed on 7 August 2023. The bill was then introduced and passed in the Rajya Sabha on 9 August 2023. On 11 August 2023, President Draupadi Murmu gave her assent, making it the Digital Personal Data Protection Act, 2023.

On 3 January 2025, MeitY released the draft rules for the Digital Personal Data Protection Act.