The Act and the Rules start in three phases under notification G.S.R. 843(E) and rule 1 of the Rules, both dated 13 November 2025. The day counts below are to midnight IST on each start date. They were worked out when this page was built and are refreshed once a day in your browser.
Board provisions and definitions
In force since 13 November 2025
Definitions (section 2), the Data Protection Board (sections 18 to 26), sections 35 and 38 to 43, section 44(1) and (3); Rules 1, 2 and 17 to 21.
Source: G.S.R. 843(E) | rule 1
Consent Manager registration
10 days to go
Starts 13 November 2026, 00:00 IST
Section 6(9) and section 27(1)(d) of the Act; Rule 4 and the First Schedule (registration and obligations of Consent Managers).
Source: G.S.R. 843(E) | rule 1
Full Data Fiduciary obligations
191 days to go
Starts 13 May 2027, 00:00 IST
Sections 3 to 17 (except section 6(9)), section 27 (except clause (1)(d)), sections 28 to 34, 36, 37 and 44(2); Rules 3, 5 to 16, 22 and 23.
Source: G.S.R. 843(E) | rule 1
Add the dates to my calendar (.ics) What changed (RSS)
How these dates were worked out
- G.S.R. 843(E) appoints three dates: the date of publication, one year from publication, and eighteen months from publication. The Gazette issue (No. 757) is dated Thursday, 13 November 2025.
- Rule 1 of the DPDP Rules uses the same steps. The corrigendum G.S.R. 892(E) changed “of this Gazette” to “in the Official Gazette” in rule 1(3) and (4).
- The PIB release of 14 November 2025 describes an 18 month phased implementation. The Lok Sabha answer of 12 August 2026 says the Rules were notified on 13 November 2025 with phases within one year and within eighteen months.
- The Gazette PDF was digitally signed and uploaded on 14 November 2025, so some commentators count from 14 November. We use the date printed on the Gazette, 13 November 2025, and will update this page if an official source says otherwise.
- We have seen unofficial reports of a proposal to shorten the transition period. We found no notification changing these dates, so the dates above stand.
Key dates
- The Act receives Presidential assent and is published in the Gazette as Act No. 22 of 2023. Act
- DPDP Rules notified (G.S.R. 846(E)), start dates appointed (G.S.R. 843(E)) and the Board established (G.S.R. 844(E)). G.S.R. 843(E) | PIB
- Corrigendum to the Rules (G.S.R. 892(E)). Corrigendum
- MeitY invites applications for the Board Chairperson and four Members. Circular
- Removal of Difficulties Order, 2026 (S.O. 5458(E)) amends the wording of section 9(1) and section 10(2)(c)(ii). Order
- Consent Manager registration provisions start. G.S.R. 843(E)
- Data Fiduciary obligations, rights and penalties start. G.S.R. 843(E)
Which provision starts when
| Date | Act | Rules | Schedules to the Rules |
|---|---|---|---|
| 13 November 2025 | Sections 1, 2, 18, 19, 20, 21, 22, 23, 24, 25, 26, 35, 38, 39, 40, 41, 42, 43, 44 (sub-sections (1) and (3)) | Rules 1, 2, 17, 18, 19, 20, 21 | Fifth, Sixth |
| 13 November 2026 | Sections 6 (sub-section (9)), 27 (clause (d) of sub-section (1)) | Rules 4 | First |
| 13 May 2027 | Sections 3, 4, 5, 6 (sub-sections (1) to (8) and (10)), 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 27 (all except clause (d) of sub-section (1)), 28, 29, 30, 31, 32, 33, 34, 36, 37, 44 (sub-section (2)) | Rules 3, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 22, 23 | Second, Third, Fourth, Seventh |