Official updates on the DPDP Act & Rules from the Government of India, MeitY and the Data Protection Board — refreshed regularly.
Subscribe via RSSAs India moves through 2026, the focus has shifted to the upcoming November 13 deadline for Consent Manager compliance. Organizations are urged to finalize their Data Protection Im…
With full compliance due by 13 May 2027, organisations likely to be notified as SDFs should begin DPIAs, independent audits and appointing an India-based DPO.…
Rule 4 governing Consent Managers becomes effective on 13 November 2026. Eligible companies are preparing to register with the Data Protection Board.…
With the 18-month transition underway, organisations have until 13 May 2027 to implement consent notices, security safeguards, breach processes and data-principal rights.…
Before processing a child's data, fiduciaries must verify a parent's identity using reliable details, a virtual token or DigiLocker, and must not track or target children.…
Consent Managers must be companies incorporated in India with a minimum net worth of Rs 2 crore, sound governance and secure, interoperable platforms.…
The final DPDP Rules, 2025 refined the January 2025 draft after 6,915 public inputs, clarifying notice, consent-manager and breach-reporting obligations.…
Under Rule 17, a high-level Search-cum-Selection Committee chaired by the Cabinet Secretary recommends the Chairperson and Members of the Data Protection Board of India.…
MeitY notified the final DPDP Rules, 2025 on 13-14 November 2025, operationalising the DPDP Act, 2023 with a staggered, phase-wise rollout.…
Provisions setting up the Data Protection Board of India (DPBI) took effect on 13 November 2025, with a search-cum-selection committee to appoint its members.…