--- title: "DPDP Act Deadlines: Compliance Timeline to May 2027 | dpdpr.in" description: "DPDP Act compliance timeline: Board rules in force 13 Nov 2025, Consent Managers from 13 Nov 2026, most duties and penalties from 13 May 2027." url: "https://dpdpr.in/deadlines/" canonical: "https://dpdpr.in/deadlines/" site: "dpdpr.in" updated: "2026-11-02" disclaimer: "Independent reference, not legal advice. Not affiliated with the Government of India or MeitY." --- # When do I have to comply? DPDP deadlines The Act and the Rules start in three phases under notification G.S.R. 843(E) and rule 1 of the Rules, both dated 13 November 2025. The day counts below are to midnight IST on each start date. They were worked out when this page was built and are refreshed once a day in your browser. 1. ### Board provisions and definitions In force since 13 November 2025 Definitions (section 2), the Data Protection Board (sections 18 to 26), sections 35 and 38 to 43, section 44(1) and (3); Rules 1, 2 and 17 to 21. Source: [G.S.R. 843(E)](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf) | [rule 1](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf) 2. ### Consent Manager registration 10 days to go Starts 13 November 2026, 00:00 IST Section 6(9) and section 27(1)(d) of the Act; Rule 4 and the First Schedule (registration and obligations of Consent Managers). Source: [G.S.R. 843(E)](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf) | [rule 1](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf) 3. ### Full Data Fiduciary obligations 191 days to go Starts 13 May 2027, 00:00 IST Sections 3 to 17 (except section 6(9)), section 27 (except clause (1)(d)), sections 28 to 34, 36, 37 and 44(2); Rules 3, 5 to 16, 22 and 23. Source: [G.S.R. 843(E)](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf) | [rule 1](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf) [Add the dates to my calendar (.ics)](https://dpdpr.in/deadlines.ics) [What changed (RSS)](https://dpdpr.in/changes.xml) ## How these dates were worked out - [G.S.R. 843(E)](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf) appoints three dates: the date of publication, one year from publication, and eighteen months from publication. The Gazette issue (No. 757) is dated Thursday, 13 November 2025. - Rule 1 of the [DPDP Rules](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf) uses the same steps. The [corrigendum G.S.R. 892(E)](https://www.meity.gov.in/static/uploads/2025/12/3c7ebbae0e5456f493f486e6845df86b.pdf) changed “of this Gazette” to “in the Official Gazette” in rule 1(3) and (4). - The [PIB release of 14 November 2025](https://www.pib.gov.in/PressReleasePage.aspx?PRID=2190014) describes an 18 month phased implementation. The [Lok Sabha answer of 12 August 2026](https://sansad.in/getFile/lsapps/loksabhaquestions/annex/188/AU3960_GyWSTk.pdf) says the Rules were notified on 13 November 2025 with phases within one year and within eighteen months. - The Gazette PDF was digitally signed and uploaded on 14 November 2025, so some commentators count from 14 November. We use the date printed on the Gazette, 13 November 2025, and will update this page if an official source says otherwise. - We have seen unofficial reports of a proposal to shorten the transition period. We found no notification changing these dates, so the dates above stand. ## Key dates 1. 11 Aug 2023 The Act receives Presidential assent and is published in the Gazette as Act No. 22 of 2023. [Act](https://www.meity.gov.in/static/uploads/2024/02/Digital-Personal-Data-Protection-Act-2023.pdf) 2. 13 Nov 2025 DPDP Rules notified (G.S.R. 846(E)), start dates appointed (G.S.R. 843(E)) and the Board established (G.S.R. 844(E)). [G.S.R. 843(E)](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf) | [PIB](https://www.pib.gov.in/PressReleasePage.aspx?PRID=2190014) 3. 10 Dec 2025 Corrigendum to the Rules (G.S.R. 892(E)). [Corrigendum](https://www.meity.gov.in/static/uploads/2025/12/3c7ebbae0e5456f493f486e6845df86b.pdf) 4. 6 May 2026 MeitY invites applications for the Board Chairperson and four Members. [Circular](https://www.meity.gov.in/static/uploads/2026/05/cd481c027470b420b4cb85fb40a91c53.pdf) 5. 6 Oct 2026 Removal of Difficulties Order, 2026 (S.O. 5458(E)) amends the wording of [section 9(1)](https://dpdpr.in/act/section-9/) and [section 10(2)(c)(ii)](https://dpdpr.in/act/section-10/). [Order](https://www.meity.gov.in/static/uploads/2026/10/daf495a7b5798a3dfa72a944b51fc176.pdf) 6. 13 Nov 2026 Consent Manager registration provisions start. [G.S.R. 843(E)](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf) 7. 13 May 2027 Data Fiduciary obligations, rights and penalties start. [G.S.R. 843(E)](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf) ## Which provision starts when | Date | Act | Rules | Schedules to the Rules | |---|---|---|---| | 13 November 2025 | Sections 1, 2, 18, 19, 20, 21, 22, 23, 24, 25, 26, 35, 38, 39, 40, 41, 42, 43, 44 (sub-sections (1) and (3)) | Rules 1, 2, 17, 18, 19, 20, 21 | Fifth, Sixth | | 13 November 2026 | Sections 6 (sub-section (9)), 27 (clause (d) of sub-section (1)) | Rules 4 | First | | 13 May 2027 | Sections 3, 4, 5, 6 (sub-sections (1) to (8) and (10)), 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 27 (all except clause (d) of sub-section (1)), 28, 29, 30, 31, 32, 33, 34, 36, 37, 44 (sub-section (2)) | Rules 3, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 22, 23 | Second, Third, Fourth, Seventh | Schedules to the Rules are listed with the rule that applies them. The penalty Schedule to the Act applies through section 33, from 13 May 2027.