What is the compliance timeline under the DPDP Rules, 2025?

Reviewed by: Santosh Raut
Senior IT Architect & Privacy Technology Consultant
Last Updated: 05 June 2026

Answer:

The Rules provide for phased implementation. Some provisions took effect on notification, while the core operational obligations - notice standards, security safeguards, breach notification, data retention and erasure, verifiable consent for children, Significant Data Fiduciary duties, data principal rights and cross-border transfer rules - commence eighteen months after publication, giving organisations time to comply.
dpdp rules timeline 18 months phased compliance commencement