January 15, 2026 · DPDP Help Center
What Changed Between the Draft and Final DPDP Rules
The final DPDP Rules, 2025 refined the January 2025 draft after 6,915 public inputs, clarifying notice, consent-manager and breach-reporting obligations.
The final Digital Personal Data Protection Rules, 2025 followed a public consultation on the draft released in January 2025, which attracted 6,915 stakeholder inputs.
Compared with the draft, the notified rules provide clearer expectations on itemised consent notices, the registration and governance of Consent Managers, reasonable security safeguards (including logging and encryption), and a structured data-breach reporting process with a 72-hour detailed report. The Government also confirmed a phased commencement to give organisations time to comply.
draft rules, final rules, public consultation, changes, comparison