Article · Gazette PDF

Digital Personal Data Protection Rules, 2025 (Gazette)

MeitY · meity.gov.in Free Advanced India

The Rules notified on 13 November 2025. Rule 1 sets the timeline: Board rules at once, Consent Manager rules one year after, and the main obligations (notice, security, breach reporting within 72 hours, children's data, retention) eighteen months after.

  • Most obligations bind eighteen months from 13 November 2025, that is from 13 May 2027.
  • Report a breach to the Board within 72 hours.
  • Keep processing logs for at least one year.
Open on meity.gov.in ↗

The question it answers

  1. I'm building an app that collects user data. What does the DPDP Act actually require me to do?

Read with it

  1. DSCI is India's industry body on data security (a NASSCOM initiative), so this is about as close to a canonical plain-language... Data Security Council of India Article · 10 min read The Digital Personal Data Protection Act, 2023: DSCI Summary Data Security Council of India (DSCI)
  2. This is the founder-facing counterpart to the DSCI summary: instead of restating the law, it turns it into an 8-step... Corrida Legal Article · 15 min read Compliance under the DPDP Act for startups collecting customer data Corrida Legal
  3. Most privacy policy generators are US-shaped (GDPR or CCPA) and bolt India on as an afterthought. PriView is built India-first... IDfy Tool · 15 min to generate PriView: Free Privacy Notice Generator (by DSCI and Privy/IDfy) DSCI and Privy by IDfy
  4. The DPDP Rules were notified in November 2025, and this explains the phased timeline so you know what is required and by when.... India Briefing Article DPDP Rules 2025 Notified: India Data Protection Compliance India Briefing
  5. The official government press release on the notified Rules, so this is the primary source to cite when a lawyer, investor, or... Press Information Bureau, Government of India Article Digital Personal Data Protection Rules, 2025 (Official Notification) Government of India
  6. Read the actual law once, at least the consent and notice sections, so you are not relying on someone else's paraphrase.... Ministry of Electronics and Information Technology (MeitY), Government of India Article · ~30 pages The Digital Personal Data Protection Act, 2023 (Official Text) Ministry of Electronics and Information Technology (MeitY), Government of India
eChai Partner Brands The partnership →