Regulatory index

DPDP rules and regulatory updates

Audience: privacy owners, legal-ops, founders · Last reviewed: March 2026

Use this page as a dated bridge between the Digital Personal Data Protection Act, 2023 and the rules, notifications, and government publications that operationalize it. It is not legal advice and not a substitute for reading the instruments in full; dates and titles are summarized for orientation—always confirm the current gazetted text and commencement notices.

When “what changed?” is the question, start with India Code and the Gazette, then MeitY’s DPDP page—not a screenshot from social media.

Official timeline (anchor dates)

The table below lists major public milestones. Verify exact notification numbers, amendments, and staggered commencement in the sources linked.

Date Milestone Primary sources
11 Aug 2023 Presidential assent; the Act is published as Act No. 22 of 2023 (44 sections, nine chapters). India Code — DPDP Act, 2023
13 Nov 2025 Commencement notified: G.S.R. 843(E) brings Section 2 (definitions), Sections 18–26 (Board setup), Sections 35–43, and Section 44(1)&(3) into force immediately. Section 6(9) and Section 27(1)(d) follow about a year later (~13 Nov 2026); Sections 3–5, 6(1)–(8)&(10), 7–17, 27 (except (1)(d)), 28–34, 36, 37, and 44(2) follow about eighteen months later (~13 May 2027). The Gazette of India; MeitY — DPDP Act, 2023
13 Nov 2025 DPDP Rules, 2025 notified: G.S.R. 846(E). Rules 1, 2, and 17–21 (publication, Board procedure) are in force immediately; Rule 4 (Consent Manager registration) follows about a year later; Rules 3, 5–16, 22, and 23 (notice content, security safeguards, breach notification, children’s consent, Significant Data Fiduciary audits, rights mechanics, erasure, cross-border transfer) follow about eighteen months later. MeitY; Gazette; Official resources (hub)

Updates on this site

We add a short note here when we materially change guides or add new operational pages tied to notified rules—so returning visitors can see what changed without re-reading the whole library.

  • March 2026 — Added this index page; linked statute spine clusters and checklists for “rules changed → what to do.”

After you confirm what is in force, translate it into owned tasks:

More context

Advertisement