IndiaIndiaLawAct No. 22 of 2023

Digital Personal Data Protection Act, 2023

Sets rules for processing digital personal data, including consent, duties of data fiduciaries, rights of data principals and a Data Protection Board with power to impose penalties.

In forceIntroducedCommitteeFloorLaw

G.S.R. 843(E) brings definitions, the Data Protection Board provisions (sections 18 to 26) and rule-making powers into force; G.S.R. 844(E) establishes the Data Protection Board of IndiaNov 13, 2025 12 months ago

Body: Parliament of India
Session: 17th Lok Sabha
In effect since: Nov 13, 202512 months ago
Topics: Privacy Data

Official page Source: Gazette of India (MeitY copy) On Regulations: India DPDP Act

Timeline

May 13, 2027 in 6 months
Core obligations (sections 3 to 17, 27 to 34 and others) scheduled to apply, eighteen months after the notification
Nov 13 in 2 days
Section 6(9) and section 27(1)(d) (consent managers) scheduled to apply, one year after the notification
Nov 13, 2025 12 months ago
G.S.R. 843(E) brings definitions, the Data Protection Board provisions (sections 18 to 26) and rule-making powers into force; G.S.R. 844(E) establishes the Data Protection Board of India
Aug 11, 2023 3 years ago
President's assent; Act published in the Gazette of India

IndiaG.S.R. 846(E)

Digital Personal Data Protection Rules, 2025

Implements the DPDP Act 2023 with rules on notice, consent managers, security safeguards, breach intimation, children's data and the Data Protection Board, phased in over 18 months.

In forceNov 13, 2025

DelawareHB 380

Delaware Personal Data Privacy Act Amendments

Amends the Delaware Personal Data Privacy Act to align it with other states' laws, including lowering the applicability threshold to entities processing data of at least 15,000 consumers.

EnactedOct 3

Californiaunverified

Wearable technology privacy bill

This bill would have regulated wearable technology devices to address privacy concerns.

VetoedSep 30

CaliforniaSB 923

Consumer Privacy: Deletion Requests

Would expand the CCPA right to delete to all personal information a business has collected about a consumer and require businesses to offer an online method for submitting privacy requests.

EnactedSep 27

CaliforniaAB 883

Data Brokers: Deletion Mechanism: Elected Officials and Judges

Would shorten the Delete Act processing cycle for data brokers from 45 to 30 days and require notice to elected officials and judges that they can use the deletion mechanism.

EnactedSep 27

JapanAct No. 56 of 2026

Act on the Protection of Personal Information Amendment

Amends Japan's personal information law to allow data sharing without consent for statistics and AI development, strengthen protections for children under 16 and facial feature data, and introduce administrative surcharges for serious violations.

In forceSep 16

Change log

AddedAdded to the list. Set by hand from the official record.Sep 27

Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.