Request a callback
DPDP Rules 2025 · Rule 1 · Group AIn force · 13 Nov 2025

Short title and commencement

Status
In force
In force since
13 Nov 2025Rule 1(2)
Penalty
No separate penalty
Binds
No direct duty on companies

In plain English

Names the Rules and sets the three commencement dates. Rules 1, 2 and 17 to 21 (the Rules about the Data Protection Board) applied from publication on 13 Nov 2025. Rule 4, on Consent Managers, applies from 13 Nov 2026. Every other Rule, which is where the duties on companies sit, applies from 13 May 2027.

The dates are counted from the publication of G.S.R. 846(E) in the Gazette of India on 13 Nov 2025. The same notification brought the matching sections of the Act into force in the same three steps (G.S.R. 843(E)).

Gazette text · Rule 1These rules may be called the Digital Personal Data Protection Rules, 2025.
  1. (1)
    These rules may be called the Digital Personal Data Protection Rules, 2025.
  2. (2)
    Rules 1, 2 and 17 to 21 shall come into force on the date of their publication in the Official Gazette.
  3. (3)
    Rule 4 shall come into force one year after the date of publication of this Gazette.
  4. (4)
    Rules 3, 5 to 16, 22 and 23 shall come into force eighteen months after the date of publication of this Gazette.

Source: Gazette of India, G.S.R. 846(E), 13 Nov 2025 (MeitY copy)

Act sections and tools that apply

DPDP Act 2023, s. 1: Short title and commencementDPDP Act 2023, s. 40: Power to make rulesCommencement notification G.S.R. 843(E)

Source: Gazette of India, G.S.R. 846(E), 13 Nov 2025 (MeitY copy) · Change log

Change log

4 Nov 2026 First version, with the text of the Gazette notification of 13 Nov 2025 and Infofacility's notes.

This page explains the law in plain English. It is not legal advice. The text of the Rules is reproduced from the Gazette of India notification of 13 Nov 2025; Infofacility's notes are its own.