---
title: "DPDP Act Section 16: Data Transfer Outside India | dpdpr.in"
description: "Section 16 of the DPDP Act 2023, Processing of personal data outside India: the official text, what it means in plain English and Hindi, and who it affects."
url: "https://dpdpr.in/act/section-16/"
canonical: "https://dpdpr.in/act/section-16/"
site: "dpdpr.in"
updated: "2026-11-02"
disclaimer: "Independent reference, not legal advice. Not affiliated with the Government of India or MeitY."
---

# Section 16. Processing of personal data outside India

DPDP Act, 2023 · Chapter IV: Special Provisions

## In simple words

Personal data can generally be sent abroad. The Government can, by notification, restrict transfers to particular countries or territories. Other Indian laws with stricter rules still apply.

- **What this means for you**: Your data may be stored or processed abroad unless the Government restricts that country.

- **What this means for businesses**: Track any countries notified under this section and sector rules, such as those of financial regulators.

- **Everyday example**: An Indian travel app uses a server in another country. That is allowed unless the Government restricts that country.

## Who it applies to

Data Fiduciaries transferring personal data outside India.

## Related Rules

- [Rule 15. Transfer of personal data outside the territory of India](https://dpdpr.in/rules/rule-15/) From 13 May 2027

### Related sections

- [Section 17. Exemptions](https://dpdpr.in/act/section-17/)

Official text as notified

Source: [MeitY copy of the Gazette (CG-DL-E-12082023-248045), page 11](https://www.meity.gov.in/static/uploads/2024/02/Digital-Personal-Data-Protection-Act-2023.pdf#page=11). Printed dashes are shown as colons; the wording is unchanged.

(1) The Central Government may, by notification, restrict the transfer of personal data by a Data Fiduciary for processing to such country or territory outside India as may be so notified.

(2) Nothing contained in this section shall restrict the applicability of any law for the time being in force in India that provides for a higher degree of protection for or restriction on transfer of personal data by a Data Fiduciary outside India in relation to any personal data or Data Fiduciary or class thereof.

## When this takes effect

- Whole section **Starts 13 May 2027** 191 days to go

Source: [G.S.R. 843(E)](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf) and [rule 1](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf). [All deadlines](https://dpdpr.in/deadlines/)