📊 Report
✓ Link checked
India
Free
Beginner
The government's own plain-language backgrounder on the DPDP Act and the Rules notified in November 2025: what a data fiduciary must do, what rights people have, and what the penalties are.
DPDP Rules, 2025 Notified: A Citizen-Centric Framework for Privacy Protection and Responsible Data Use
From Press Information Bureau, Government of India 7 pages
- The Rules were notified in November 2025 with an eighteen-month period for phased compliance.
- Every data fiduciary must give a separate, clear consent notice explaining the specific purpose, and people can withdraw consent at any time.
- Requests to access, correct or erase data must be answered within ninety days.
- Penalties go up to ₹250 crore for failing to keep reasonable security safeguards and up to ₹200 crore for not reporting a breach.
