The rapid growth of digital technologies, artificial intelligence, social media, cloud computing, and e-governance has significantly increased the collection and processing of personal data in India. While these technological advancements have enhanced public services and economic development, they have also raised serious concerns regarding data privacy, cybersecurity, surveillance, identity theft, and unauthorized use of personal information, This concern is borne out by recent industry data: cybersecurity incidents reported in India more than doubled between 2022 and 2024, rising from approximately 1.03 million to 2.27 million cases. Such figures illustrate why safeguarding personal data has moved from a narrow compliance concern to a matter of broader digital resilience. Recognizing the importance of informational privacy, the Supreme Court of India in Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1. declared the Right to Privacy as a fundamental right under Article 21 of the Constitution. Subsequently, the enactment of the Digital Personal Data Protection Act, 2023 marked a significant step towards establishing a comprehensive legal framework for the protection of digital personal data in India. This study examines the constitutional and statutory framework governing data protection and Privacy in India, with particular emphasis on the Digital Personal Data Protection Act, 2023. It analyzes the legal challenges associated with government surveillance, data breaches, cross-border data transfers, technological innovations, and the balance between privacy, transparency, and national security. The research adopts a doctrinal and analytical methodology based on primary legal sources, including statutes and judicial decisions, and secondary sources such as books, research articles, government reports, and academic databases.