Skip to content
Legislations.
IndiaIndiaLawLawG.S.R. 846(E)

Digital Personal Data Protection Rules, 2025

Implements the DPDP Act 2023 with rules on notice, consent managers, security safeguards, breach intimation, children's data and the Data Protection Board, phased in over 18 months.

Where it stands

In forceIntroducedCommitteeFloorLawIn force

Final rules notified; rules 1, 2 and 17 to 21 (Data Protection Board) come into force on publicationNov 13, 202510 months ago

Body
Ministry of Electronics and Information Technology
Introduced
Jan 3, 2025
In effect since
Nov 13, 202510 months ago
PrivacyData
Official page On Regulations: India DPDP Act

Timeline

  1. May 13, 2027 in 7 months

    Rules 3, 5 to 16, 22 and 23 (notice, safeguards, breach reporting, children's data) scheduled to apply, eighteen months after publication

  2. Nov 13 in 6 weeks

    Rule 4 (consent managers) scheduled to apply, one year after publication

  3. Nov 13, 2025 10 months ago

    Final rules notified; rules 1, 2 and 17 to 21 (Data Protection Board) come into force on publication

  4. Jan 3, 2025 1 year ago

    Draft rules published for consultation (G.S.R. 02(E))