BEGIN:VCALENDAR VERSION:2.0 PRODID:-//Infofacility//Compliance calendar//EN CALSCALE:GREGORIAN METHOD:PUBLISH X-WR-CALNAME:Infofacility compliance calendar X-WR-CALDESC:Every entry in the regulatory tracker. From the regulatory tra cker at infofacility.com. This explains the law in plain English. It is no t legal advice. X-WR-TIMEZONE:Asia/Kolkata REFRESH-INTERVAL;VALUE=DURATION:P1D X-PUBLISHED-TTL:P1D BEGIN:VEVENT UID:cert-in-directions-issued@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20220428 DTEND;VALUE=DATE:20220429 SUMMARY:CERT-In: Directions under sub-section (6) of section 70B of the Inf ormation Technology Act\, 2000 relating to information security practices\ , procedure\, prevention\, response and reporting of cyber incidents for S afe & Trusted Internet (No. 20(3)/2022-CERT-In) DESCRIPTION:Every service provider\, intermediary\, data centre\, body corp orate and government organisation must report the cyber incidents listed i n Annexure I to CERT-In within 6 hours of noticing them\, keep 180 days of ICT logs within India\, synchronise clocks to NIC or NPL time and designa te a point of contact\; the Directions take effect 60 days after issue.\n\ nStatus: In force\nSource: CERT-In Directions No. 20(3)/2022-CERT-In\, 28 Apr 2022\, https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.202 2.pdf\nMore: https://www.infofacility.com/tools/breach-notification-clock\ n\nThis explains the law in plain English. It is not legal advice. URL:https://www.infofacility.com/tools/breach-notification-clock TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cert-in-directions-effective@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20220627 DTEND;VALUE=DATE:20220628 SUMMARY:CERT-In: CERT-In Directions of 28 Apr 2022 take effect DESCRIPTION:Sixty days after issue\, by the Directions' own terms (many sum maries give 28 Jun 2022)\; CERT-In's notice of 27 Jun 2022 gave MSMEs\, an d data centre\, VPS\, cloud and VPN providers for customer validation\, un til 25 Sep 2022.\n\nStatus: In force. The date is approximate.\nSource: CE RT-In\, extension of timelines for MSMEs and validation of subscriber deta ils\, 27 Jun 2022\, https://www.cert-in.org.in/PDF/CERT-In_directions_exte nsion_MSMEs_and_validation_27.06.2022.pdf\nMore: https://www.infofacility. com/tools/breach-notification-clock\n\nThis explains the law in plain Engl ish. It is not legal advice. URL:https://www.infofacility.com/tools/breach-notification-clock TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:rbi-it-outsourcing-master-direction@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20230410 DTEND;VALUE=DATE:20230411 SUMMARY:RBI: Master Direction on Outsourcing of Information Technology Serv ices (RBI/2023-24/102) DESCRIPTION:Banks\, larger NBFCs and other regulated entities must govern m aterial IT outsourcing through a board-approved policy\, risk-based due di ligence\, contracts with audit and access rights and storage of data in In dia\, exit plans and concentration risk checks\, and providers must report incidents fast enough for the entity to notify RBI within 6 hours\; effec tive 1 Oct 2023.\n\nStatus: In force\nSource: RBI Master Direction RBI/202 3-24/102\, DoS.CO.CSITEG/SEC.1/31.01.015/2023-24\, https://www.rbi.org.in/ Scripts/NotificationUser.aspx?Id=12486\nMore: https://www.infofacility.com /tracker\n\nThis explains the law in plain English. It is not legal advice . URL:https://www.infofacility.com/tracker TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:irdai-information-cyber-security-guidelines-2023@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20230424 DTEND;VALUE=DATE:20230425 SUMMARY:IRDAI: IRDAI Information and Cyber Security Guidelines\, 2023 DESCRIPTION:Insurers and insurance intermediaries must run a board-overseen information security programme with a CISO and an Information Security Ri sk Management Committee\, carry out annual risk assessments and audits rep orted to IRDAI\, and follow CERT-In's 6-hour incident reporting\; the Guid elines replace the 2017 guidelines for insurers.\n\nStatus: In force\nSour ce: IRDAI Information and Cyber Security Guidelines\, 2023\, https://irdai .gov.in/document-detail?documentId=3314780\nMore: https://www.infofacility .com/tracker\n\nThis explains the law in plain English. It is not legal ad vice. URL:https://www.infofacility.com/tracker TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:sebi-brsr-core-introduced@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20230712 DTEND;VALUE=DATE:20230713 SUMMARY:SEBI: BRSR Core: Framework for assurance and ESG disclosures for va lue chain (SEBI/HO/CFD/CFD-SEC-2/P/CIR/2023/122) DESCRIPTION:Introduces BRSR Core\, a set of KPIs under nine ESG attributes\ , with mandatory reasonable assurance on a glide path (top 150 listed enti ties in FY 2023-24\, 250 in FY 2024-25\, 500 in FY 2025-26\, 1\,000 in FY 2026-27) and value chain disclosures for the top 250 from FY 2024-25\; the assurance and value chain requirements were replaced on 28 Mar 2025\, the glide path stays.\n\nStatus: Superseded\nSource: SEBI circular SEBI/HO/CF D/CFD-SEC-2/P/CIR/2023/122\, https://www.sebi.gov.in/legal/circulars/jul-2 023/brsr-core-framework-for-assurance-and-esg-disclosures-for-value-chain_ 73854.html\nMore: https://www.infofacility.com/tracker\n\nThis explains th e law in plain English. It is not legal advice. URL:https://www.infofacility.com/tracker TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:dpdp-act-assent@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20230811 DTEND;VALUE=DATE:20230812 SUMMARY:Parliament: The Digital Personal Data Protection Act\, 2023 (No. 22 of 2023) DESCRIPTION:India's first standalone personal data law receives the Preside nt's assent\; its sections take effect only on the dates the Central Gover nment notifies under s. 1(2)\, so nothing changed for companies on this da y.\n\nStatus: In force\nSource: The Digital Personal Data Protection Act\, 2023\, Act No. 22 of 2023\, https://www.indiacode.nic.in/bitstream/123456 789/22037/2/a2023-22.pdf\nMore: https://www.infofacility.com/laws/dpdp-act -2023\n\nThis explains the law in plain English. It is not legal advice. URL:https://www.infofacility.com/laws/dpdp-act-2023 TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:rbi-it-governance-master-direction@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20231107 DTEND;VALUE=DATE:20231108 SUMMARY:RBI: Master Direction on Information Technology Governance\, Risk\, Controls and Assurance Practices (RBI/2023-24/107) DESCRIPTION:From 1 Apr 2024\, commercial banks\, NBFCs in the top\, upper a nd middle layers\, credit information companies and all-India financial in stitutions need a board-level IT Strategy Committee\, a CISO independent o f the IT function\, risk-based IS audit\, six-monthly vulnerability assess ments and annual penetration tests of critical systems\, and half-yearly D R drills.\n\nStatus: In force\nSource: RBI Master Direction RBI/2023-24/10 7\, DoS.CO.CSITEG/SEC.7/31.01.015/2023-24\, https://www.rbi.org.in/Scripts /NotificationUser.aspx?Id=12562\nMore: https://www.infofacility.com/tracke r\n\nThis explains the law in plain English. It is not legal advice. URL:https://www.infofacility.com/tracker TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:sebi-cscrf-issued@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20240820 DTEND;VALUE=DATE:20240821 SUMMARY:SEBI: Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities (REs) (SEBI/HO/ITD-1/ITD_CSC_EXT/P/CIR/2024/113) DESCRIPTION:One graded framework replaces SEBI's earlier cybersecurity circ ulars: five RE categories\, cyber audits by CERT-In empanelled auditors\, a Cyber Capability Index for MIIs and Qualified REs\, with compliance orig inally due by 1 Jan 2025 for the six categories that already had a circula r and 1 Apr 2025 for the rest.\n\nStatus: In force\nSource: SEBI circular SEBI/HO/ITD-1/ITD_CSC_EXT/P/CIR/2024/113\, https://www.sebi.gov.in/legal/c irculars/aug-2024/cybersecurity-and-cyber-resilience-framework-cscrf-for-s ebi-regulated-entities-res-_85964.html\nMore: https://www.infofacility.com /tracker\n\nThis explains the law in plain English. It is not legal advice . URL:https://www.infofacility.com/tracker TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:dpdp-draft-rules-consultation@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20250103 DTEND;VALUE=DATE:20250104 SUMMARY:MeitY: Draft Digital Personal Data Protection Rules\, 2025\, publis hed for public consultation (G.S.R. 02(E)) DESCRIPTION:MeitY published 22 draft rules and seven schedules for comment on MyGov until 18 Feb 2025 (later extended)\; 6\,915 inputs were received\ , and the final Rules notified on 13 Nov 2025 replaced the draft\, with ch anges to numbering and content.\n\nStatus: Superseded\nSource: Draft Digit al Personal Data Protection Rules\, 2025\, G.S.R. 02(E)\, https://www.meit y.gov.in/static/uploads/2024/02/4a33a6289884e33bc2124e8280e69ea2.pdf\nMore : https://www.infofacility.com/laws/dpdp-act-2023\n\nThis explains the law in plain English. It is not legal advice. URL:https://www.infofacility.com/laws/dpdp-act-2023 TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:sebi-brsr-assessment-or-assurance@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20250328 DTEND;VALUE=DATE:20250329 SUMMARY:SEBI: Measures to facilitate ease of doing business with respect to framework for assurance or assessment\, ESG disclosures for value chain a nd introduction of voluntary disclosure on green credits (SEBI/HO/CFD/CFD- PoD-1/P/CIR/2025/42) DESCRIPTION:Listed entities may choose assessment or assurance for BRSR Cor e instead of mandatory reasonable assurance\; value chain disclosures beco me voluntary for the top 250 from FY 2025-26 and their assessment or assur ance voluntary from FY 2026-27\; a green credits leadership indicator is a dded from FY 2024-25\; the glide path to the top 1\,000 stays.\n\nStatus: In force\nSource: SEBI circular SEBI/HO/CFD/CFD-PoD-1/P/CIR/2025/42\, http s://www.sebi.gov.in/legal/circulars/mar-2025/measures-to-facilitate-ease-o f-doing-business-with-respect-to-framework-for-assurance-or-assessment-esg -disclosures-for-value-chain-and-introduction-of-voluntary-disclosure-on-g reen-credits_93102.html\nMore: https://www.infofacility.com/tracker\n\nThi s explains the law in plain English. It is not legal advice. URL:https://www.infofacility.com/tracker TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:sebi-cscrf-technical-clarifications@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20250828 DTEND;VALUE=DATE:20250829 SUMMARY:SEBI: Technical Clarifications to Cybersecurity and Cyber Resilienc e Framework (CSCRF) for SEBI Regulated Entities (REs) (SEBI/HO/ITD-1/ITD_C SC_EXT/P/CIR/2025/119) DESCRIPTION:CSCRF scope is limited to systems used exclusively for SEBI-reg ulated activity\, controls equivalent to another regulator's framework cou nt as compliance\, mobile app security and ISO 27001 certification become recommendatory\, VAPT reports are submitted as summaries\, portfolio manag ers are re-categorised by AUM\, and REs must follow CERT-In's cyber securi ty audit policy guidelines.\n\nStatus: In force\nSource: SEBI circular SEB I/HO/ITD-1/ITD_CSC_EXT/P/CIR/2025/119\, https://www.sebi.gov.in/legal/circ ulars/aug-2025/technical-clarifications-to-cybersecurity-and-cyber-resilie nce-framework-cscrf-for-sebi-regulated-entities-res-_96329.html\nMore: htt ps://www.infofacility.com/tracker\n\nThis explains the law in plain Englis h. It is not legal advice. URL:https://www.infofacility.com/tracker TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:sebi-cscrf-compliance-deadline@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20250831 DTEND;VALUE=DATE:20250901 SUMMARY:SEBI: CSCRF compliance deadline for SEBI regulated entities (extend ed by SEBI/HO/ITD-1/ITD_CSC_EXT/P/CIR/2025/96) DESCRIPTION:The last extension\, by two months from 30 Jun 2025\, for all R Es except MIIs\, KRAs and QRTAs\; from this date your cyber audits by CERT -In empanelled auditors run on the CSCRF calendar and the first audit cycl e has closed.\n\nStatus: Deadline\nSource: SEBI circular SEBI/HO/ITD-1/ITD _CSC_EXT/P/CIR/2025/96\, https://www.sebi.gov.in/legal/circulars/jun-2025/ extension-towards-adoption-and-implementation-of-cybersecurity-and-cyber-r esilience-framework-cscrf-for-sebi-regulated-entities-res-_94902.html\nMor e: https://www.infofacility.com/tracker\n\nThis explains the law in plain English. It is not legal advice. URL:https://www.infofacility.com/tracker TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:dpdp-rules-2025-notified@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20251113 DTEND;VALUE=DATE:20251114 SUMMARY:MeitY: Digital Personal Data Protection Rules\, 2025 (G.S.R. 846(E) ) DESCRIPTION:The Rules that make the Act work\, in three phases: Rules 1\, 2 and 17 to 21 (the Board) at once\, Rule 4 (Consent Managers) one year lat er\, and Rules 3\, 5 to 16\, 22 and 23 (notice\, security safeguards\, bre ach intimation within 72 hours\, retention\, children\, Significant Data F iduciaries\, rights\, appeals) eighteen months later\, on 13 May 2027.\n\n Status: In force\nSource: Digital Personal Data Protection Rules\, 2025\, G.S.R. 846(E)\, https://egazette.gov.in/WriteReadData/2025/267650.pdf\nMor e: https://www.infofacility.com/laws/dpdp-act-2023\n\nThis explains the la w in plain English. It is not legal advice. URL:https://www.infofacility.com/laws/dpdp-act-2023 TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:dpdp-act-commencement-notification@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20251113 DTEND;VALUE=DATE:20251114 SUMMARY:MeitY: Commencement of provisions of the Digital Personal Data Prot ection Act\, 2023 (G.S.R. 843(E)) DESCRIPTION:Brings the Board provisions (ss. 18 to 26)\, the definitions an d the rule-making powers into force at once\; s. 6(9)\, on Consent Manager registration\, after one year\; and the operative duties\, rights and pen alties (ss. 3 to 17 and 27 to 34 among them) after eighteen months\, on 13 May 2027.\n\nStatus: In force\nSource: G.S.R. 843(E)\, Commencement of pr ovisions of the Digital Personal Data Protection Act\, 2023\, https://egaz ette.gov.in/WriteReadData/2025/267647.pdf\nMore: https://www.infofacility. com/laws/dpdp-act-2023/section-1\n\nThis explains the law in plain English . It is not legal advice. URL:https://www.infofacility.com/laws/dpdp-act-2023/section-1 TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:dpb-established@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20251113 DTEND;VALUE=DATE:20251114 SUMMARY:DPB: Establishment of the Data Protection Board of India (G.S.R. 84 4(E)) DESCRIPTION:The Central Government establishes the Board under s. 18\, with its head office in the National Capital Region\; a companion notification \, G.S.R. 845(E)\, fixes four Members. The Chairperson and Members are app ointed separately\; MeitY called for applications on 6 May 2026.\n\nStatus : In force\nSource: G.S.R. 844(E)\, Establishment of the Data Protection B oard of India\, https://egazette.gov.in/WriteReadData/2025/267648.pdf\nMor e: https://www.infofacility.com/laws/dpdp-act-2023/section-18\n\nThis expl ains the law in plain English. It is not legal advice. URL:https://www.infofacility.com/laws/dpdp-act-2023/section-18 TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:dpdp-rules-2025-corrigenda@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20251210 DTEND;VALUE=DATE:20251211 SUMMARY:MeitY: Corrigenda to the Digital Personal Data Protection Rules\, 2 025 (G.S.R. 892(E)) DESCRIPTION:Eight typographical corrections to G.S.R. 846(E)\, including th e clause reference "(a) to (g)" on page 38\; nothing substantive changes\, but quote the Rules from the corrected text.\n\nStatus: In force\nSource: G.S.R. 892(E)\, Corrigenda to the Digital Personal Data Protection Rules\ , 2025\, https://www.meity.gov.in/static/uploads/2025/12/3c7ebbae0e5456f49 3f486e6845df86b.pdf\nMore: https://www.infofacility.com/laws/dpdp-act-2023 \n\nThis explains the law in plain English. It is not legal advice. URL:https://www.infofacility.com/laws/dpdp-act-2023 TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cert-in-space-cyber-security-guidelines@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20260226 DTEND;VALUE=DATE:20260227 SUMMARY:CERT-In: Cyber Security Framework and Guidelines for Space includin g Satellite Communication (CISG-2026-01) DESCRIPTION:Advisory guidelines\, released with SIA-India\, for satellite o perators\, ground stations\, equipment vendors and space enterprises\; not a Direction under s. 70B(6)\, so they bind you only where a regulator or a contract adopts them.\n\nStatus: Voluntary\nSource: CERT-In\, Cyber Secu rity Framework and Guidelines for Space including Satellite Communication\ , CISG-2026-01\, https://www.cert-in.org.in/s2cMainServlet?pageid=GUIDLNVI EW02&refcode=CISG-2026-01\nMore: https://www.infofacility.com/tracker\n\nT his explains the law in plain English. It is not legal advice. URL:https://www.infofacility.com/tracker TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:dpb-chairperson-members-applications@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20260506 DTEND;VALUE=DATE:20260507 SUMMARY:DPB: Appointment to the posts of Chairperson and other Members in t he Data Protection Board of India (F. No. 2(1)/2026-Pers.I) DESCRIPTION:MeitY invites applications for the Board's Chairperson and four Members\, at least one with legal expertise\; the Board\, established on 13 Nov 2025\, needs them in place before it can hear complaints or impose penalties.\n\nStatus: Upcoming\nSource: MeitY circular F. No. 2(1)/2026-Pe rs.I\, 6 May 2026\, https://www.meity.gov.in/static/uploads/2026/05/cd481c 027470b420b4cb85fb40a91c53.pdf\nMore: https://www.infofacility.com/laws/dp dp-act-2023/section-18\n\nThis explains the law in plain English. It is no t legal advice. URL:https://www.infofacility.com/laws/dpdp-act-2023/section-18 TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cert-in-ai-security-auditing-guidelines@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20261104 DTEND;VALUE=DATE:20261105 SUMMARY:CERT-In: Artificial Intelligence (AI) Security Auditing Guidelines (CISG-2026-04) DESCRIPTION:CERT-In's guidance on auditing the security of AI systems\, iss ued as a guideline rather than a Direction under s. 70B(6)\; expect CERT-I n empanelled auditors and sector regulators to draw on it\, and read it al ongside ISO/IEC 42001.\n\nStatus: Voluntary\nSource: CERT-In\, Artificial Intelligence (AI) Security Auditing Guidelines\, CISG-2026-04\, https://ww w.cert-in.org.in/s2cMainServlet?pageid=GUIDLNVIEW02&refcode=CISG-2026-04\n More: https://www.infofacility.com/tracker\n\nThis explains the law in pla in English. It is not legal advice. URL:https://www.infofacility.com/tracker TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:consent-manager-registration-opens@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20261113 DTEND;VALUE=DATE:20261114 SUMMARY:DPB: Rule 4 of the DPDP Rules 2025 and s. 6(9) of the Act take effe ct: Consent Manager registration opens DESCRIPTION:One year after the Rules\, companies that want to act as Consen t Managers can apply to the Board under Rule 4 and the First Schedule\; th ey must be companies incorporated in India with a net worth of at least Rs 2 crore and meet the Schedule's conditions on independence and interopera bility.\n\nStatus: Upcoming. The date is approximate.\nSource: DPDP Rules 2025\, Rule 1(3)\, Rule 4 and First Schedule\, G.S.R. 846(E)\, https://ega zette.gov.in/WriteReadData/2025/267650.pdf\nMore: https://www.infofacility .com/laws/dpdp-act-2023/section-6\n\nThis explains the law in plain Englis h. It is not legal advice. URL:https://www.infofacility.com/laws/dpdp-act-2023/section-6 TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:brsr-core-top-1000@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20270331 DTEND;VALUE=DATE:20270401 SUMMARY:SEBI: BRSR Core assessment or assurance reaches the top 1\,000 list ed entities (FY 2026-27) DESCRIPTION:The last step of the glide path set on 12 Jul 2023: the top 1\, 000 listed entities by market capitalisation must have their BRSR Core for FY 2026-27 assessed or assured\, and assessment or assurance of value cha in disclosures becomes voluntary from the same year.\n\nStatus: Upcoming. The date is approximate.\nSource: SEBI circular SEBI/HO/CFD/CFD-PoD-1/P/CI R/2025/42\, https://www.sebi.gov.in/legal/circulars/mar-2025/measures-to-f acilitate-ease-of-doing-business-with-respect-to-framework-for-assurance-o r-assessment-esg-disclosures-for-value-chain-and-introduction-of-voluntary -disclosure-on-green-credits_93102.html\nMore: https://www.infofacility.co m/tracker\n\nThis explains the law in plain English. It is not legal advic e. URL:https://www.infofacility.com/tracker TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:dpdp-full-commencement@infofacility.com DTSTAMP:20261105T175852Z DTSTART;VALUE=DATE:20270513 DTEND;VALUE=DATE:20270514 SUMMARY:MeitY: DPDP Act and Rules: every remaining provision comes into for ce DESCRIPTION:Notice\, consent\, security safeguards\, breach intimation\, re tention and erasure\, children's data\, Significant Data Fiduciary duties\ , Data Principal rights\, appeals and the Schedule's penalties (up to Rs 2 50 crore) become enforceable eighteen months after the Rules were notified .\n\nStatus: Upcoming\nSource: DPDP Rules 2025\, Rule 1(4)\, G.S.R. 846(E) \, https://egazette.gov.in/WriteReadData/2025/267650.pdf\nMore: https://ww w.infofacility.com/laws/dpdp-act-2023\n\nThis explains the law in plain En glish. It is not legal advice. URL:https://www.infofacility.com/laws/dpdp-act-2023 TRANSP:TRANSPARENT END:VEVENT END:VCALENDAR