Skip to content
Legislations.
IndiaIndiaLawLawAct No. 22 of 2023

Digital Personal Data Protection Act, 2023

Sets rules for processing digital personal data, including consent, duties of data fiduciaries, rights of data principals and a Data Protection Board with power to impose penalties.

Where it stands

In forceIntroducedCommitteeFloorLawIn force

G.S.R. 843(E) brings definitions, the Data Protection Board provisions (sections 18 to 26) and rule-making powers into force; G.S.R. 844(E) establishes the Data Protection Board of IndiaNov 13, 202510 months ago

Body
Parliament of India
Session
17th Lok Sabha
In effect since
Nov 13, 202510 months ago
PrivacyData
Official page Source: Gazette of India (MeitY copy) On Regulations: India DPDP Act

Timeline

  1. May 13, 2027 in 7 months

    Core obligations (sections 3 to 17, 27 to 34 and others) scheduled to apply, eighteen months after the notification

  2. Nov 13 in 6 weeks

    Section 6(9) and section 27(1)(d) (consent managers) scheduled to apply, one year after the notification

  3. Nov 13, 2025 10 months ago

    G.S.R. 843(E) brings definitions, the Data Protection Board provisions (sections 18 to 26) and rule-making powers into force; G.S.R. 844(E) establishes the Data Protection Board of India

  4. Aug 11, 2023 3 years ago

    President's assent; Act published in the Gazette of India