Article
DPDP Rules 2025 Notified: India Data Protection Compliance
India Briefing Free Beginner India
The DPDP Rules were notified in November 2025, and this explains the phased timeline so you know what is required and by when. It maps the stages (Data Protection Board, consent managers, then full compliance duties by May 2027) in language a founder can act on. Read it to plan compliance work rather than panic about the full 250 crore rupee penalty ceiling.
- Full compliance duties (notice, security, breach reporting) apply by 13 May 2027
- The Rules run on an eighteen-month phased timeline, so you have runway to prepare
- Data principals can request access, correction, and erasure, and you must respond in ninety days