# dpdpr.in: DPDP Act 2023 and DPDP Rules 2025 Explained

> India's DPDP Act 2023 and DPDP Rules 2025 in plain English: every section and rule, compliance deadlines to May 2027, penalties up to Rs 250 crore, checklist. An independent reference: not legal advice, not affiliated with the Government of India or MeitY.

Last updated: 2 November 2026, 01:10 IST. This file is regenerated on every build of the site, so it always lists the pages that exist now.

Every page has a Markdown twin: add index.md to any directory URL, or send `Accept: text/markdown`. Official texts are quoted from the MeitY copies of the Gazette of India.

Editorial notes:

- Official text is shown as notified in the Gazette, with any corrigendum beside it. Printed dashes are shown as colons; no words are changed.
- Later amendments are applied and marked: the Digital Personal Data Protection (Removal of Difficulties) Order, 2026 (S.O. 5458(E), 5 October 2026) changed section 9(1) to read 'child or of a person with disability' and section 10(2)(c)(ii) to read 'periodic data audit'.
- "In simple words" summaries are dpdpr.in's own. If a summary and the official text differ, the official text prevails.
- Dates are shown only when a Gazette notification or PIB release confirms them.
- The enforcement tracker uses neutral words such as reported and alleged, and never says anyone broke the law unless an official order says so. Each entry links to its sources.
- Hindi summaries are translations of our plain English summaries, labelled as such; they are not the official Hindi text of the Act.
- Nothing here is legal advice.

## Key dates

- 13 November 2025: Board provisions and definitions. Definitions (section 2), the Data Protection Board (sections 18 to 26), sections 35 and 38 to 43, section 44(1) and (3); Rules 1, 2 and 17 to 21. (in force)
- 13 November 2026: Consent Manager registration. Section 6(9) and section 27(1)(d) of the Act; Rule 4 and the First Schedule (registration and obligations of Consent Managers). (10 days to go on 02 November 2026)
- 13 May 2027: Full Data Fiduciary obligations. Sections 3 to 17 (except section 6(9)), section 27 (except clause (1)(d)), sections 28 to 34, 36, 37 and 44(2); Rules 3, 5 to 16, 22 and 23. (191 days to go on 02 November 2026)

## Main pages

- [Home](https://dpdpr.in/index.md)
- [DPDP Act 2023: All 44 Sections in Plain English](https://dpdpr.in/act/index.md)
- [DPDP Rules 2025: All 23 Rules and 7 Schedules](https://dpdpr.in/rules/index.md)
- [DPDP Act Deadlines: Compliance Timeline to May 2027](https://dpdpr.in/deadlines/index.md)
- [DPDP Compliance Checklist for Data Fiduciaries](https://dpdpr.in/guides/compliance-checklist/index.md)
- [DPDP Enforcement Tracker: Complaints and Cases](https://dpdpr.in/enforcement/index.md)
- [DPDP Act Glossary: Definitions in Plain English](https://dpdpr.in/glossary/index.md)
- [DPDP Act FAQ: Common Questions Answered Simply](https://dpdpr.in/faq/index.md)
- [Data Protection Board of India: Status and Powers](https://dpdpr.in/board/index.md)
- [Official DPDP Sources: Gazette, MeitY, India Code](https://dpdpr.in/sources/index.md)
- [Editorial Policy: How We Explain the DPDP Act](https://dpdpr.in/editorial-policy/index.md)
- [Corrections Log](https://dpdpr.in/corrections/index.md)
- [Contact dpdpr.in: Corrections and Questions](https://dpdpr.in/contact/index.md): email dpdpr dot in at s3c dot in

## Tools

- [DPDP Act Applicability Checker: Am I Covered?](https://dpdpr.in/am-i-covered/index.md): up to six yes or no questions that show whether the Act and Rules are likely to apply and which parts matter; runs in the browser and sends nothing
- [DPDP Compliance Checklist for Data Fiduciaries](https://dpdpr.in/guides/compliance-checklist/index.md): 24 obligations with section and rule references; ticks are saved only on the reader's device
- [DPDP Compliance Checklist: Printable Version](https://dpdpr.in/guides/compliance-checklist/print/index.md) and [checklist as CSV](https://dpdpr.in/guides/compliance-checklist.csv)
- [Start dates as a calendar file (.ics)](https://dpdpr.in/deadlines.ics): the three DPDP start dates

## Citizens' Rights

Plain-language help for ordinary people: what to do after a fraud call, spam, a SIM swap or a data leak, with official helplines and step by step complaint routes.

- [Internet and broadband providers: your rights and how to complain](https://dpdpr.in/rights/isp-broadband/index.md): Home broadband, fibre and Wi-Fi providers: your rights, evidence and how to complain. Plain steps, helplines and templates.
- [Mobile phone companies: your rights and how to complain](https://dpdpr.in/rights/mobile-telecom/index.md): Airtel, Jio, Vi, BSNL and others: SIM fraud, KYC misuse, billing, porting and complaints. Plain steps, helplines and templates.
- [Spam calls, SMS and telemarketing: your rights and how to complain](https://dpdpr.in/rights/spam-calls-sms/index.md): Block marketing, complain within 7 days, and report fraud calls on Chakshu. Plain steps, helplines and templates.
- [Banks: your rights and how to complain](https://dpdpr.in/rights/banks/index.md): Fraud, unauthorised transactions, data misuse and how to reach the RBI Ombudsman. Plain steps, helplines and templates.
- [UPI, payment apps and wallets: your rights and how to complain](https://dpdpr.in/rights/upi-payments/index.md): Failed payments, fraud payments, QR and collect request scams, and refunds. Plain steps, helplines and templates.
- [Digital loans and loan apps: your rights and how to complain](https://dpdpr.in/rights/loan-apps/index.md): Check if a loan app is real, stop harassment of your contacts, and complain. Plain steps, helplines and templates.
- [Credit reports and credit bureaus: your rights and how to complain](https://dpdpr.in/rights/credit-reports/index.md): Get your free credit report, fix wrong entries and claim Rs 100 a day for delays. Plain steps, helplines and templates.
- [Insurance companies and agents: your rights and how to complain](https://dpdpr.in/rights/insurance/index.md): Policy data leaks, mis-selling calls and claim problems: the IRDAI route. Plain steps, helplines and templates.
- [Social media and messaging apps: your rights and how to complain](https://dpdpr.in/rights/social-media/index.md): Fake profiles, hacked accounts, leaked photos and the Grievance Appellate Committee. Plain steps, helplines and templates.
- [Data breaches and leaks: your rights and how to complain](https://dpdpr.in/rights/data-breaches/index.md): What to do when a company leaks your data, and what you can demand. Plain steps, helplines and templates.
- [Hospitals, labs and health apps (including ABHA): your rights and how to complain](https://dpdpr.in/rights/hospitals-labs/index.md): Medical records, test reports, health apps and your ABHA health account. Plain steps, helplines and templates.
- [E-commerce and quick commerce apps: your rights and how to complain](https://dpdpr.in/rights/ecommerce/index.md): Online shopping and 10 minute delivery apps: orders, returns, fake calls and your data. Plain steps, helplines and templates.
- [Food delivery, ride hailing and gig apps: your rights and how to complain](https://dpdpr.in/rights/food-ride-gig/index.md): Food and cab apps, drivers and delivery workers: safety, data and complaints. Plain steps, helplines and templates.
- [Employers, job portals and job offers: your rights and how to complain](https://dpdpr.in/rights/employers-jobs/index.md): What your employer can collect, fake job offers, and job portal data. Plain steps, helplines and templates.
- [Schools, colleges and ed-tech apps (children's data): your rights and how to complain](https://dpdpr.in/rights/schools-edtech/index.md): Children's data, school apps, verifiable parental consent and ed-tech selling. Plain steps, helplines and templates.
- [Housing societies, CCTV and visitor apps: your rights and how to complain](https://dpdpr.in/rights/housing-societies/index.md): CCTV, visitor logs, resident WhatsApp groups and apps that run society gates. Plain steps, helplines and templates.
- [Government services and Aadhaar: your rights and how to complain](https://dpdpr.in/rights/government-aadhaar/index.md): Aadhaar misuse, Government offices, masked Aadhaar, CPGRAMS and RTI. Plain steps, helplines and templates.
- [Stock brokers and investment apps (SEBI): your rights and how to complain](https://dpdpr.in/rights/stock-brokers/index.md): Trading apps, demat accounts, investment scams and SEBI SCORES. Plain steps, helplines and templates.
- [Travel: airlines, trains, hotels and booking sites: your rights and how to complain](https://dpdpr.in/rights/travel/index.md): Bookings, ID copies at hotels, Digi Yatra, fake helplines and complaints. Plain steps, helplines and templates.
- [Dating and matrimony apps: your rights and how to complain](https://dpdpr.in/rights/dating-matrimony/index.md): Fake profiles, romance scams, sextortion and leaked photos. Plain steps, helplines and templates.
- [Vehicles: dealers, registration data and car rentals: your rights and how to complain](https://dpdpr.in/rights/vehicles/index.md): Car dealers, service centres, vehicle lookups, FASTag messages, renewal calls and self drive rentals. Plain steps, helplines and templates.
- [Property portals, brokers, landlords and rentals: your rights and how to complain](https://dpdpr.in/rights/property-rentals/index.md): Broker calls after one enquiry, listings posted without consent, fake rentals, landlords and hidden cameras. Plain steps, helplines and templates.
- [A caller from a personal number knew all my bank details: genuine bank staff or fraud?](https://dpdpr.in/rights/scenarios/bank-impersonation-call/index.md): Someone said they were from your bank or its agent, called from a personal mobile, and knew your details. Your rights, how to fight it step by step, and what to do if it is fake.
- [Someone called with personal details I never shared with them](https://dpdpr.in/rights/scenarios/caller-knew-my-details/index.md): A caller knew your name, address, purchases or family details, and named a company. Your rights, how to fight it step by step, and what to do if it is fake.
- [I got a KYC update message or call: is it really my bank?](https://dpdpr.in/rights/scenarios/fake-kyc-sms/index.md): A message or call says your KYC is pending and your account will be blocked. Your rights, how to fight it step by step, and what to do if it is fake.
- [A delivery person or courier kept my number and is contacting me](https://dpdpr.in/rights/scenarios/delivery-partner-misuse/index.md): A delivery person messages or calls you after delivery, or a 'courier' calls about a parcel. Your rights, how to fight it step by step, and what to do if it is fake.
- [A ride app driver keeps calling and texting me from different numbers after the ride](https://dpdpr.in/rights/scenarios/ride-driver-contacting-me/index.md): After a trip, the driver sends messages like 'Hi' or 'call me' on SMS or WhatsApp, from more than one number. Your rights, how to fight it step by step, and what to do if it is fake.
- [A self-drive car rental host has my licence, ID and number, and is misusing them](https://dpdpr.in/rights/scenarios/self-drive-rental-host/index.md): You rented on a platform like Zoomcar where the car belongs to a private host, and the host now contacts you or misuses your documents. Your rights, how to fight it step by step, and what to do if it is fake.
- [A video call says I am under 'digital arrest' by police, CBI or customs](https://dpdpr.in/rights/scenarios/digital-arrest/index.md): A caller in uniform on video says you are under arrest and must pay or stay on the call. Your rights, how to fight it step by step, and what to do if it is fake.
- [A loan app or recovery agent is calling my relatives and friends](https://dpdpr.in/rights/scenarios/loan-app-threats/index.md): A recovery agent calls your family, friends or contacts, or threatens you. Your rights, how to fight it step by step, and what to do if it is fake.
- [My credit report shows a loan I never took](https://dpdpr.in/rights/scenarios/loan-i-never-took/index.md): A loan or card you never applied for appears on your credit report. Your rights, how to fight it step by step, and what to do if it is fake.
- [My SIM suddenly stopped working](https://dpdpr.in/rights/scenarios/sim-stopped-working/index.md): Your SIM lost network without warning, possibly because someone got a duplicate SIM. Your rights, how to fight it step by step, and what to do if it is fake.
- [A SIM was taken in my name, or telecom staff leaked my details](https://dpdpr.in/rights/scenarios/sim-in-my-name/index.md): Sanchar Saathi shows numbers you never took, or a telecom employee or retailer shared your data. Your rights, how to fight it step by step, and what to do if it is fake.
- [A seller from a shopping app contacted me on WhatsApp or by phone](https://dpdpr.in/rights/scenarios/seller-contacted-off-platform/index.md): After an order, a seller messages you directly, to sell, ask for reviews, or offer refunds outside the app. Your rights, how to fight it step by step, and what to do if it is fake.
- [An insurance agent knows my policy details and keeps calling](https://dpdpr.in/rights/scenarios/insurance-agent-knows/index.md): An agent or 'advisor' knows your policy, sum assured or renewal date. Your rights, how to fight it step by step, and what to do if it is fake.
- [A hospital or lab staff member shared my reports on WhatsApp](https://dpdpr.in/rights/scenarios/hospital-shared-reports/index.md): Your test results or medical records were shared without your consent. Your rights, how to fight it step by step, and what to do if it is fake.
- [My employer shared my personal data with others](https://dpdpr.in/rights/scenarios/employer-excess-data/index.md): Your employer or its vendor shared your salary, bank, medical or ID details. Your rights, how to fight it step by step, and what to do if it is fake.
- [My housing society shared residents' data or CCTV footage](https://dpdpr.in/rights/scenarios/housing-society-cctv/index.md): The committee or security agency shared your phone number, flat details or CCTV clips. Your rights, how to fight it step by step, and what to do if it is fake.
- [My child's school app collects too much or shares my child's data](https://dpdpr.in/rights/scenarios/school-app-children/index.md): A school or ed-tech app collects or shares more than it needs about your child. Your rights, how to fight it step by step, and what to do if it is fake.
- [A company told me my data was leaked in a breach](https://dpdpr.in/rights/scenarios/breach-notice/index.md): You got a breach notice, or read that a company you use was hacked. Your rights, how to fight it step by step, and what to do if it is fake.
- [A company keeps sending marketing after I said stop](https://dpdpr.in/rights/scenarios/marketing-after-opt-out/index.md): Calls, SMS or emails continue after you opted out or registered DND. Your rights, how to fight it step by step, and what to do if it is fake.
- [A customer care number turned out fake, or a real agent misused my data](https://dpdpr.in/rights/scenarios/fake-customer-care/index.md): A helpline number you found online led to a scammer, or a real support agent misused your details. Your rights, how to fight it step by step, and what to do if it is fake.
- [Someone made a fake profile using my name or photos](https://dpdpr.in/rights/scenarios/fake-social-account/index.md): An account impersonates you or uses your photos. Your rights, how to fight it step by step, and what to do if it is fake.
- [My phone was lost or stolen, or a repair shop accessed my data](https://dpdpr.in/rights/scenarios/phone-lost-or-stolen/index.md): Your phone is gone, or a shop or person who had it misused what was on it. Your rights, how to fight it step by step, and what to do if it is fake.
- [A bank employee told someone I know about my balance, loans or statement](https://dpdpr.in/rights/scenarios/bank-staff-told-others/index.md): Someone in your circle knew your bank balance, loan or account statement, and it seems to have come from bank staff. Your rights, how to fight it step by step, and what to do if it is fake.
- [My bank shared my account details or statement with my employer](https://dpdpr.in/rights/scenarios/bank-shared-with-employer/index.md): Your salary bank or loan bank gave your employer details or a statement you did not authorise. Your rights, how to fight it step by step, and what to do if it is fake.
- [A scammer knew my branch and that my KYC was pending, so the leak must be from the bank](https://dpdpr.in/rights/scenarios/scammer-knew-kyc-pending/index.md): A fraud call or SMS quoted your branch, your account type or a pending KYC update. Your rights, how to fight it step by step, and what to do if it is fake.
- [A credit card telecaller on a personal mobile knew my PAN, employer and even my other bank](https://dpdpr.in/rights/scenarios/card-telecaller-knew-pan/index.md): A sales caller pushing a card or loan quoted your PAN, employer and accounts at another bank. Your rights, how to fight it step by step, and what to do if it is fake.
- [A loan or card agent admitted my details came from a bank branch](https://dpdpr.in/rights/scenarios/dsa-said-data-from-branch/index.md): An agent told you openly that a branch employee gave them your details. Your rights, how to fight it step by step, and what to do if it is fake.
- [Right after I got a new card, a caller knew the card number and my PAN](https://dpdpr.in/rights/scenarios/caller-knew-new-card/index.md): Within days of a new card arriving, a caller quoted its digits and your PAN. Your rights, how to fight it step by step, and what to do if it is fake.
- [A reward points or limit upgrade call used my real card limit and address](https://dpdpr.in/rights/scenarios/reward-points-call/index.md): A caller offering to redeem points or raise your limit knew your real limit and address, and asked for an OTP. Your rights, how to fight it step by step, and what to do if it is fake.
- [A credit card was issued and activated in my name without my consent](https://dpdpr.in/rights/scenarios/credit-card-issued-without-consent/index.md): A card you never asked for arrived, was activated, or appeared on your credit report. Your rights, how to fight it step by step, and what to do if it is fake.
- [My own bank's loan or card sales team calls me every day](https://dpdpr.in/rights/scenarios/bank-loan-team-calls-daily/index.md): Your bank keeps calling to sell loans or cards, even after you said no. Your rights, how to fight it step by step, and what to do if it is fake.
- [My bank says its customer data was found on the dark web](https://dpdpr.in/rights/scenarios/bank-data-on-dark-web/index.md): Your bank or a news report says customer data from your bank was leaked. Your rights, how to fight it step by step, and what to do if it is fake.
- [My new number gets the previous owner's bank OTPs and recovery calls, or my old number was given away](https://dpdpr.in/rights/scenarios/new-number-previous-owner/index.md): Mobile numbers are recycled. You now get someone else's OTPs and loan calls, or your own unused number went to a stranger. Your rights, how to fight it step by step, and what to do if it is fake.
- [The SIM shop took my fingerprint twice and an extra SIM was issued on my Aadhaar](https://dpdpr.in/rights/scenarios/sim-shop-took-fingerprint-twice/index.md): A retailer asked you to scan again, and later Sanchar Saathi showed a second SIM in your name. Your rights, how to fight it step by step, and what to do if it is fake.
- [Someone got a duplicate of my SIM and emptied my bank account](https://dpdpr.in/rights/scenarios/sim-swap-emptied-account/index.md): Your phone lost signal, and soon after money left your account using OTPs sent to your number. Your rights, how to fight it step by step, and what to do if it is fake.
- [My broadband or mobile provider's data seems to feed spam calls](https://dpdpr.in/rights/scenarios/provider-data-feeds-spam/index.md): Right after a new connection or plan change, spam calls start quoting it. Your rights, how to fight it step by step, and what to do if it is fake.
- [Someone listed me as a loan reference without asking, and agents now threaten me](https://dpdpr.in/rights/scenarios/listed-as-loan-reference/index.md): A friend, colleague or stranger named you as a reference and recovery agents now call you. Your rights, how to fight it step by step, and what to do if it is fake.
- [A relative gave my number to their lender and now I get the recovery calls](https://dpdpr.in/rights/scenarios/relative-gave-my-number-to-lender/index.md): Your number was given as a contact for someone else's loan. Your rights, how to fight it step by step, and what to do if it is fake.
- [Recovery agents called my office, HR or colleagues](https://dpdpr.in/rights/scenarios/recovery-agents-called-office/index.md): Agents contacted your workplace about your loan. Your rights, how to fight it step by step, and what to do if it is fake.
- [A loan app read my contacts and messaged everyone that I am a defaulter](https://dpdpr.in/rights/scenarios/loan-app-messaged-contacts/index.md): Your friends and family received messages calling you a fraud or defaulter. Your rights, how to fight it step by step, and what to do if it is fake.
- [A loan app is threatening to send morphed nude photos of me](https://dpdpr.in/rights/scenarios/loan-app-morphed-photos/index.md): Agents say they will share edited intimate photos unless you pay. Your rights, how to fight it step by step, and what to do if it is fake.
- [Money was credited by a loan app I never applied to, and now they demand repayment](https://dpdpr.in/rights/scenarios/loan-credited-never-applied/index.md): An unknown amount landed in your account and agents demand much more back. Your rights, how to fight it step by step, and what to do if it is fake.
- [My credit report shows loans or enquiries I never made](https://dpdpr.in/rights/scenarios/credit-report-unknown-loans/index.md): Your credit report lists a loan, card or enquiry you do not recognise. Your rights, how to fight it step by step, and what to do if it is fake.
- [I checked my credit score on a marketplace app and now banks and agents call nonstop](https://dpdpr.in/rights/scenarios/credit-score-app-calls/index.md): After using a free credit score or loan marketplace app, loan and card calls started. Your rights, how to fight it step by step, and what to do if it is fake.
- [One loan eligibility form gave me dozens of calls and OTPs a day](https://dpdpr.in/rights/scenarios/loan-form-dozens-of-calls/index.md): You filled one online form and now get OTPs and calls from many lenders. Your rights, how to fight it step by step, and what to do if it is fake.
- [A caller ID app shows my name and details to strangers](https://dpdpr.in/rights/scenarios/caller-id-app-shows-my-name/index.md): People who never had your number see your name, or a wrong or offensive name, when you call. Your rights, how to fight it step by step, and what to do if it is fake.
- [Before my car insurance renewal, dozens of agents call and WhatsApp me](https://dpdpr.in/rights/scenarios/car-insurance-renewal-calls/index.md): Weeks before your motor policy expires, agents from many companies call with your car and policy details. Your rights, how to fight it step by step, and what to do if it is fake.
- [Agents from other insurers know my health policy and push me to port](https://dpdpr.in/rights/scenarios/agents-know-health-policy/index.md): Callers know your health insurer, sum insured and renewal date, and push you to switch. Your rights, how to fight it step by step, and what to do if it is fake.
- [My insurer passed my details to an aggregator or partner](https://dpdpr.in/rights/scenarios/insurer-shared-with-aggregator/index.md): You bought from an insurer, and an aggregator or partner you never used now contacts you. Your rights, how to fight it step by step, and what to do if it is fake.
- [I took one quote on an insurance aggregator and the calls never stop](https://dpdpr.in/rights/scenarios/insurance-aggregator-calls/index.md): After one online quote, calls from the aggregator and insurers continue for months. Your rights, how to fight it step by step, and what to do if it is fake.
- [A caller from 'IRDAI' or the Insurance Ombudsman said I can get a refund on my old policy](https://dpdpr.in/rights/scenarios/fake-irdai-refund-call/index.md): Someone claiming to be from IRDAI or an ombudsman promised a refund or bonus for a fee. Your rights, how to fight it step by step, and what to do if it is fake.
- [An agent forged my signature and bought a policy using my KYC](https://dpdpr.in/rights/scenarios/agent-forged-policy/index.md): A policy you never agreed to was issued using your documents, and premiums are being demanded or debited. Your rights, how to fight it step by step, and what to do if it is fake.
- [Can my employer see my health claims through the group policy?](https://dpdpr.in/rights/scenarios/employer-sees-health-claims/index.md): You are worried HR can see your diagnosis through the company health cover. Your rights, how to fight it step by step, and what to do if it is fake.
- [After buying a new car I get roadside assistance, resort and holiday package calls](https://dpdpr.in/rights/scenarios/new-car-calls/index.md): Soon after registering a new vehicle, callers know your car, registration and address. Your rights, how to fight it step by step, and what to do if it is fake.
- [Anyone can look up my vehicle number and get my name and address](https://dpdpr.in/rights/scenarios/vehicle-number-lookup/index.md): Apps and websites show owner details from a registration number. Your rights, how to fight it step by step, and what to do if it is fake.
- [I listed my car for sale and got flooded by dealers and brokers](https://dpdpr.in/rights/scenarios/car-listed-for-sale-calls/index.md): After one listing on a car selling site, dealers call all day, even after it is sold. Your rights, how to fight it step by step, and what to do if it is fake.
- [The dealership or service centre keeps my KYC copies and my data leaks from there](https://dpdpr.in/rights/scenarios/dealer-keeps-kyc-copies/index.md): A dealer has copies of your Aadhaar, PAN and address, and you suspect leaks. Your rights, how to fight it step by step, and what to do if it is fake.
- [A message says my FASTag, electricity or utility will be cut unless I click a link](https://dpdpr.in/rights/scenarios/fastag-electricity-cut-message/index.md): An urgent SMS or WhatsApp says your service will stop tonight unless you pay or update details. Your rights, how to fight it step by step, and what to do if it is fake.
- [The car rental app's face check failed after I paid and I could not get my money back](https://dpdpr.in/rights/scenarios/rental-face-check-refund/index.md): You paid for a self drive booking, then the app's identity check failed and the refund is stuck. Your rights, how to fight it step by step, and what to do if it is fake.
- [As a host, my car was taken by someone who did not match the account](https://dpdpr.in/rights/scenarios/host-car-taken-by-other/index.md): You list your car on a sharing platform, and the person who took it is not the verified guest. Your rights, how to fight it step by step, and what to do if it is fake.
- [A self drive rental kept my deposit and stopped responding](https://dpdpr.in/rights/scenarios/self-drive-deposit-kept/index.md): Your security deposit was not refunded and support does not reply. Your rights, how to fight it step by step, and what to do if it is fake.
- [A bike taxi rider texted or video called me after drop off](https://dpdpr.in/rights/scenarios/bike-taxi-rider-contacted-me/index.md): After a bike taxi ride, the rider contacted you on WhatsApp, by text or video call. Your rights, how to fight it step by step, and what to do if it is fake.
- [An auto or cab driver abused me after I cancelled and sent messages to my number](https://dpdpr.in/rights/scenarios/driver-abused-after-cancel/index.md): You cancelled a ride, and the driver called or messaged abuse. Your rights, how to fight it step by step, and what to do if it is fake.
- [I got a cash on delivery parcel I never ordered, or someone placed orders in my name](https://dpdpr.in/rights/scenarios/cod-parcel-never-ordered/index.md): A courier brings a parcel you did not order and asks for cash, or orders appear under your name. Your rights, how to fight it step by step, and what to do if it is fake.
- [Right after an online order, scammers called with my order details](https://dpdpr.in/rights/scenarios/scam-call-after-order/index.md): Callers knew what you ordered and asked for payment, an OTP or a 'refund' step. Your rights, how to fight it step by step, and what to do if it is fake.
- [I bought from a brand's own website and scammers knew my order](https://dpdpr.in/rights/scenarios/brand-website-order-leak/index.md): After buying directly from a brand, callers quoted your order. Your rights, how to fight it step by step, and what to do if it is fake.
- [A home service professional contacted me outside the app, or I am unsure who sees my details](https://dpdpr.in/rights/scenarios/home-service-professional/index.md): You booked a plumber, cleaner or beautician through an app and want to know where your details go. Your rights, how to fight it step by step, and what to do if it is fake.
- [The movers app subcontracted my move and I could not get support](https://dpdpr.in/rights/scenarios/movers-subcontracted/index.md): You booked packers and movers through an app, a different firm turned up, and things went wrong. Your rights, how to fight it step by step, and what to do if it is fake.
- [I searched once on a local search app and get calls for months](https://dpdpr.in/rights/scenarios/local-search-calls/index.md): After one enquiry on a local listings site, vendors call you for months. Your rights, how to fight it step by step, and what to do if it is fake.
- [After posting on a B2B marketplace, scammers and spam callers reached me](https://dpdpr.in/rights/scenarios/b2b-listing-spam/index.md): Your business listing or buy request on a trade marketplace brought scam calls. Your rights, how to fight it step by step, and what to do if it is fake.
- [The hotel insisted on keeping a photocopy of my Aadhaar, or refused me a room over ID](https://dpdpr.in/rights/scenarios/hotel-aadhaar-photocopy/index.md): A hotel or homestay wanted to photocopy or photograph your full Aadhaar, or turned you away after seeing your ID. Your rights, how to fight it step by step, and what to do if it is fake.
- [I found a hidden camera in a homestay, hostel or rented room](https://dpdpr.in/rights/scenarios/hidden-camera-in-stay/index.md): You found a camera, or a device that looks like one, in a room you rented. Your rights, how to fight it step by step, and what to do if it is fake.
- [I searched for my airline or travel refund helpline and the 'agent' took my money](https://dpdpr.in/rights/scenarios/airline-refund-helpline-scam/index.md): A number you found online claimed to be the airline or booking site and took a payment or remote access. Your rights, how to fight it step by step, and what to do if it is fake.
- [Someone used my PNR or booking details to cancel or steal my tickets](https://dpdpr.in/rights/scenarios/pnr-misused/index.md): Your booking was cancelled or changed by someone else using the PNR and your name. Your rights, how to fight it step by step, and what to do if it is fake.
- [A travel or visa agent kept my passport or misused my documents](https://dpdpr.in/rights/scenarios/travel-agent-kept-passport/index.md): An agent will not return your passport, or used your documents for something else. Your rights, how to fight it step by step, and what to do if it is fake.
- [I viewed one property on a portal and dozens of brokers started calling](https://dpdpr.in/rights/scenarios/property-portal-broker-calls/index.md): After one enquiry or a premium plan on a property site, brokers call nonstop. Your rights, how to fight it step by step, and what to do if it is fake.
- [Brokers posted my property without asking me](https://dpdpr.in/rights/scenarios/broker-posted-my-property/index.md): Your flat or house appears on a portal, with photos, listed by someone you never authorised. Your rights, how to fight it step by step, and what to do if it is fake.
- [How do I get my number off property portals?](https://dpdpr.in/rights/scenarios/remove-number-property-portal/index.md): You want your number removed from portals and broker lists. Your rights, how to fight it step by step, and what to do if it is fake.
- [I lost my deposit to a fake rental listing in a WhatsApp group](https://dpdpr.in/rights/scenarios/fake-rental-listing-deposit/index.md): Someone posted a flat, took a token amount or deposit, and vanished. Your rights, how to fight it step by step, and what to do if it is fake.
- [My landlord shared my personal details with others](https://dpdpr.in/rights/scenarios/landlord-shared-my-details/index.md): Your landlord passed your ID, phone or rent details to brokers, neighbours or strangers. Your rights, how to fight it step by step, and what to do if it is fake.
- [A rental or society app leaked user data](https://dpdpr.in/rights/scenarios/rental-app-data-leak/index.md): A rental, flat sharing or society app reported or was accused of a data leak. Your rights, how to fight it step by step, and what to do if it is fake.
- [The society will not show me CCTV footage of an incident](https://dpdpr.in/rights/scenarios/society-wont-show-cctv/index.md): Something happened to you or your car in the society, and the committee will not share the footage. Your rights, how to fight it step by step, and what to do if it is fake.
- [My neighbour's camera records my door](https://dpdpr.in/rights/scenarios/neighbour-camera-faces-door/index.md): A neighbour installed a camera that watches your door or home. Your rights, how to fight it step by step, and what to do if it is fake.
- [The society app or guard records every visitor, or the society group shared residents' details](https://dpdpr.in/rights/scenarios/society-visitor-app/index.md): Visitor apps record names, numbers and photos, or a residents' group shared phone numbers and flat details. Your rights, how to fight it step by step, and what to do if it is fake.
- [My diagnosis seems to have reached advertisers or strangers](https://dpdpr.in/rights/scenarios/diagnosis-reached-advertisers/index.md): After a test or visit, you see ads or get calls about your condition. Your rights, how to fight it step by step, and what to do if it is fake.
- [The lab sent my test results to my employer's insurer or someone else](https://dpdpr.in/rights/scenarios/lab-sent-results-to-others/index.md): Your results reached someone you did not authorise. Your rights, how to fight it step by step, and what to do if it is fake.
- [After buying medicine online, the pharmacy app will not stop calling](https://dpdpr.in/rights/scenarios/pharmacy-app-calls/index.md): An online pharmacy keeps calling and messaging about refills and offers. Your rights, how to fight it step by step, and what to do if it is fake.
- [The online lab gave me a wrong report](https://dpdpr.in/rights/scenarios/online-lab-wrong-report/index.md): A home collection or app based lab gave a result that turned out to be wrong. Your rights, how to fight it step by step, and what to do if it is fake.
- [My spouse or family shared my medical documents without asking](https://dpdpr.in/rights/scenarios/family-shared-medical-documents/index.md): A family member passed your reports to relatives, an employer or a court. Your rights, how to fight it step by step, and what to do if it is fake.
- [A fake recruiter had my CV from a job portal and asked for a fee](https://dpdpr.in/rights/scenarios/fake-recruiter-had-my-cv/index.md): A 'recruiter' knew your CV details and asked for registration, training or interview fees. Your rights, how to fight it step by step, and what to do if it is fake.
- [A job app 'HR' asked for a deposit or my documents](https://dpdpr.in/rights/scenarios/job-app-hr-deposit/index.md): Someone claiming to be HR asked for a security deposit, bank details or ID copies before joining. Your rights, how to fight it step by step, and what to do if it is fake.
- [I paid for a premium job portal plan and got scam calls instead of jobs](https://dpdpr.in/rights/scenarios/premium-job-plan-scam/index.md): A paid profile boost brought fake recruiters. Your rights, how to fight it step by step, and what to do if it is fake.
- [The background check company wants my PF or tax login](https://dpdpr.in/rights/scenarios/background-check-login/index.md): A verification firm asked for your EPFO or income tax password. Your rights, how to fight it step by step, and what to do if it is fake.
- [HR revealed employees' personal details, or my ex employer threatens me using my details](https://dpdpr.in/rights/scenarios/employer-shared-or-threatens/index.md): HR shared personal data with others, or a former employer uses your details to threaten action. Your rights, how to fight it step by step, and what to do if it is fake.
- [My company wants to install tracking on my personal phone](https://dpdpr.in/rights/scenarios/tracking-on-personal-phone/index.md): Your employer asks you to install device management or location tracking on your own phone. Your rights, how to fight it step by step, and what to do if it is fake.
- [After my exam, coaching institutes and admission agents started calling](https://dpdpr.in/rights/scenarios/coaching-calls-after-exam/index.md): After a board or entrance exam, callers know your roll number, marks or rank. Your rights, how to fight it step by step, and what to do if it is fake.
- [An ed-tech sales team pressured my family and seemed to know about my child](https://dpdpr.in/rights/scenarios/edtech-sales-pressure/index.md): Sales staff knew your child's class and school, and pushed a course or a loan. Your rights, how to fight it step by step, and what to do if it is fake.
- [My child's school posts photos and shares parent numbers](https://dpdpr.in/rights/scenarios/school-posts-photos/index.md): The school puts children's photos online or shares parents' numbers in big groups. Your rights, how to fight it step by step, and what to do if it is fake.
- [My matrimony profile showed up on other sites or reached strangers](https://dpdpr.in/rights/scenarios/matrimony-profile-copied/index.md): Your profile, photos or number appear elsewhere, or strangers contact you. Your rights, how to fight it step by step, and what to do if it is fake.
- [A fake profile on a matrimony site cheated me](https://dpdpr.in/rights/scenarios/fake-matrimony-profile-cheated/index.md): Someone built trust through a matrimony or dating profile, then asked for money. Your rights, how to fight it step by step, and what to do if it is fake.
- [I am being blackmailed with an intimate video call](https://dpdpr.in/rights/scenarios/video-call-blackmail/index.md): Someone recorded or faked an intimate video call and demands money. Your rights, how to fight it step by step, and what to do if it is fake.
- [Someone used my PAN or Aadhaar for a GST number, a company or a loan](https://dpdpr.in/rights/scenarios/pan-aadhaar-misused/index.md): A GST registration, company, loan or tax notice shows up on your PAN or a family member's Aadhaar. Your rights, how to fight it step by step, and what to do if it is fake.
- [Stock tip callers know I just opened a demat account](https://dpdpr.in/rights/scenarios/demat-tip-calls/index.md): Soon after opening a demat account, callers offer tips or advisory plans. Your rights, how to fight it step by step, and what to do if it is fake.
- [I was added to a WhatsApp investment group and lost money](https://dpdpr.in/rights/scenarios/whatsapp-investment-group/index.md): An 'expert' group showed profits on an app, and you cannot withdraw. Your rights, how to fight it step by step, and what to do if it is fake.
- [My gym or salon keeps messaging me or shared my details](https://dpdpr.in/rights/scenarios/gym-shared-my-details/index.md): A gym, salon or fitness app keeps sending offers or passed your number to partners. Your rights, how to fight it step by step, and what to do if it is fake.
- [The ticketing platform might hand my details to an organiser or someone else](https://dpdpr.in/rights/scenarios/ticketing-platform-details/index.md): You want to know who sees your name, number or ID when you book event tickets. Your rights, how to fight it step by step, and what to do if it is fake.
- [I bought cricket or concert tickets from a site that turned out to be fake](https://dpdpr.in/rights/scenarios/fake-tickets-site/index.md): You paid for tickets on a lookalike site or a resale post and got nothing. Your rights, how to fight it step by step, and what to do if it is fake.
- [Police caught someone selling personal data of crores of Indians. Is mine in it?](https://dpdpr.in/rights/scenarios/data-seller-arrested/index.md): News reports a gang caught selling personal data in bulk. Your rights, how to fight it step by step, and what to do if it is fake.
- [What happened to you? Everyday privacy and fraud situations](https://dpdpr.in/rights/scenarios/index.md): 108 everyday situations, from a bank agent calling on a personal number to a ride driver who will not stop texting: your rights and how to fight it, step by step.
- [When a platform shares your data with a third party (hosts, drivers, sellers, agents)](https://dpdpr.in/rights/platforms-and-third-parties/index.md): Car hosts, drivers, delivery partners, hotels, sellers and agents get your data from apps. Who answers for a leak, your rights, and how to fight it step by step.
- [DPDP rights request letter (template)](https://dpdpr.in/rights/rights-request-letter/index.md): A ready letter to ask a company for your data, a correction, erasure or a grievance fix.
- [Evidence checklist](https://dpdpr.in/rights/evidence-checklist/index.md): What to save, and how, before you complain anywhere.
- [Where to complain: the escalation ladder](https://dpdpr.in/rights/escalation-ladder/index.md): Which office to go to first, next and last, by type of problem.
- [What the Data Protection Board can and cannot do](https://dpdpr.in/rights/data-protection-board/index.md): Powers, limits, and when you can go to it.
- [When companies can use your data without consent](https://dpdpr.in/rights/deemed-consent/index.md): Legitimate uses under section 7, in plain words.
- [Rights after death or incapacity: nominees](https://dpdpr.in/rights/nominees-and-deceased/index.md): How to nominate someone, and what they can do.
- [Is this a crime or a privacy complaint?](https://dpdpr.in/rights/crime-or-privacy/index.md): A quick triage: police, regulator or company first.
- [Citizens' Rights: your data, your complaints, step by step](https://dpdpr.in/rights/index.md): Plain steps for ordinary people: what to do after a fraud call, spam, a SIM swap or a data leak, your rights by sector, and the official helplines and portals.

## Hindi summaries

Hindi translations of the "In simple words" summary, shown on these section pages:

- [DPDP Act Section 3: Application of Act](https://dpdpr.in/act/section-3/index.md)
- [DPDP Act Section 4: Grounds for processing personal data](https://dpdpr.in/act/section-4/index.md)
- [DPDP Act Section 5: Notice](https://dpdpr.in/act/section-5/index.md)
- [DPDP Act Section 6: Consent](https://dpdpr.in/act/section-6/index.md)
- [DPDP Act Section 7: Certain legitimate uses](https://dpdpr.in/act/section-7/index.md)
- [DPDP Act Section 8: General obligations of Data Fiduciary](https://dpdpr.in/act/section-8/index.md)
- [DPDP Act Section 9: Processing Children's Data](https://dpdpr.in/act/section-9/index.md)
- [DPDP Act Section 11: Right to Access Information](https://dpdpr.in/act/section-11/index.md)
- [DPDP Act Section 12: Right to Correction and Erasure](https://dpdpr.in/act/section-12/index.md)
- [DPDP Act Section 13: Right of grievance redressal](https://dpdpr.in/act/section-13/index.md)
- [DPDP Act Section 33: Penalties](https://dpdpr.in/act/section-33/index.md)

## Recent changes

- 1 November 2026: [Enforcement tracker: AU Small Finance Bank (Reported)](https://dpdpr.in/enforcement/#2026-10-au-sfb-potential-leak)
- 1 November 2026: [Enforcement tracker: Google India (student's writ petition, Punjab and Haryana High Court) (Court order)](https://dpdpr.in/enforcement/#2026-10-ph-hc-google-gmail-access)
- 1 November 2026: [Citizens' Rights: 108 situations, with what people tried and what worked, and new vehicle and property guides](https://dpdpr.in/rights/scenarios/)
- 1 November 2026: [Citizens' Rights: scenarios rewritten to hold companies accountable, plus ride driver, car rental host and platform pages](https://dpdpr.in/rights/scenarios/)
- 1 November 2026: [Citizens' Rights: 10 more sector guides (health, shopping, delivery and ride apps, jobs, schools, housing societies, Government and Aadhaar, brokers, travel, dating apps)](https://dpdpr.in/rights/)
- 1 November 2026: [New: Citizens' Rights, plain steps for fraud calls, spam, SIM swaps, data leaks and complaints](https://dpdpr.in/rights/)
- 31 October 2026: [Enforcement tracker: Data Protection Board of India (Reported)](https://dpdpr.in/enforcement/#2026-10-dpbi-appointments-pending)
- 31 October 2026: [Enforcement tracker: Digital News Publishers Association (DNPA v. Union of India) (Court order)](https://dpdpr.in/enforcement/#2026-10-sc-dnpa-dpdp-challenge)
- 30 October 2026: [New reader poll: How should the DPDP Act treat journalism?](https://dpdpr.in/polls/journalism-exemption/)
- 29 October 2026: [Enforcement tracker: Central Board of Film Certification (eCinePramaan portal) (Complaint filed)](https://dpdpr.in/enforcement/#2026-10-cbfc-ecinepramaan)

## Polls

- [Reader polls](https://dpdpr.in/polls/index.md): one vote per browser; results are real votes only and appear after voting
- [How should the DPDP Act treat journalism?](https://dpdpr.in/polls/journalism-exemption/index.md): open, added 30 October 2026

## Guides

- [DPDP Compliance Checklist for Data Fiduciaries](https://dpdpr.in/guides/compliance-checklist/index.md): An interactive checklist of the main DPDP Act and Rules obligations for Data Fiduciaries, with section and rule references.
- [Significant Data Fiduciary Under the DPDP Act](https://dpdpr.in/guides/significant-data-fiduciary/index.md): Who can be notified as a Significant Data Fiduciary and what extra duties apply under section 10 and rule 13.
- [DPDP Consent and Consent Managers Explained](https://dpdpr.in/guides/consent-and-consent-managers/index.md): How valid consent works under the DPDP Act, how to withdraw it, and how Consent Managers are registered.
- [Children's Data Under the DPDP Act: Parental Consent](https://dpdpr.in/guides/childrens-data/index.md): Verifiable parental consent, the ban on tracking and targeted advertising, and the Fourth Schedule exemptions.
- [DPDP Breach Notification: 72-Hour Rule Explained](https://dpdpr.in/guides/breach-notification/index.md): What a Data Fiduciary must tell affected people and the Board after a personal data breach, and when.
- [Data Principal Rights Under the DPDP Act](https://dpdpr.in/guides/data-principal-rights/index.md): Your rights under the DPDP Act: access, correction and erasure, grievance redressal and nomination, and your duties.
- [DPDP Act Penalties: Fine Amounts by Breach Type](https://dpdpr.in/guides/penalties/index.md): The Schedule to the DPDP Act quoted exactly, with how the Board decides the amount.
- [Cross-Border Data Transfer Under the DPDP Act](https://dpdpr.in/guides/cross-border-transfers/index.md): How section 16 and rule 15 govern transfers of personal data outside India.
- [DPDP Act vs GDPR: Key Differences Compared](https://dpdpr.in/guides/dpdp-vs-gdpr/index.md): A careful side-by-side comparison of India's DPDP Act and Rules with the EU General Data Protection Regulation.

## Act sections

- [DPDP Act Section 1: Short title and commencement](https://dpdpr.in/act/section-1/index.md)
- [DPDP Act Section 2: Definitions](https://dpdpr.in/act/section-2/index.md)
- [DPDP Act Section 3: Application of Act](https://dpdpr.in/act/section-3/index.md)
- [DPDP Act Section 4: Grounds for processing personal data](https://dpdpr.in/act/section-4/index.md)
- [DPDP Act Section 5: Notice](https://dpdpr.in/act/section-5/index.md)
- [DPDP Act Section 6: Consent](https://dpdpr.in/act/section-6/index.md)
- [DPDP Act Section 7: Certain legitimate uses](https://dpdpr.in/act/section-7/index.md)
- [DPDP Act Section 8: General obligations of Data Fiduciary](https://dpdpr.in/act/section-8/index.md)
- [DPDP Act Section 9: Processing Children's Data](https://dpdpr.in/act/section-9/index.md)
- [DPDP Act Section 10: Significant Data Fiduciary Obligations](https://dpdpr.in/act/section-10/index.md)
- [DPDP Act Section 11: Right to Access Information](https://dpdpr.in/act/section-11/index.md)
- [DPDP Act Section 12: Right to Correction and Erasure](https://dpdpr.in/act/section-12/index.md)
- [DPDP Act Section 13: Right of grievance redressal](https://dpdpr.in/act/section-13/index.md)
- [DPDP Act Section 14: Right to nominate](https://dpdpr.in/act/section-14/index.md)
- [DPDP Act Section 15: Duties of Data Principal](https://dpdpr.in/act/section-15/index.md)
- [DPDP Act Section 16: Data Transfer Outside India](https://dpdpr.in/act/section-16/index.md)
- [DPDP Act Section 17: Exemptions](https://dpdpr.in/act/section-17/index.md)
- [DPDP Act Section 18: Establishment of Board](https://dpdpr.in/act/section-18/index.md)
- [DPDP Act Section 19: Board Composition and Qualifications](https://dpdpr.in/act/section-19/index.md)
- [DPDP Act Section 20: Salary and Term of Board Members](https://dpdpr.in/act/section-20/index.md)
- [DPDP Act Section 21: Disqualification of Board Members](https://dpdpr.in/act/section-21/index.md)
- [DPDP Act Section 22: Resignation and Vacancies in Board](https://dpdpr.in/act/section-22/index.md)
- [DPDP Act Section 23: Proceedings of Board](https://dpdpr.in/act/section-23/index.md)
- [DPDP Act Section 24: Officers and employees of Board](https://dpdpr.in/act/section-24/index.md)
- [DPDP Act Section 25: Board Members as Public Servants](https://dpdpr.in/act/section-25/index.md)
- [DPDP Act Section 26: Powers of Chairperson](https://dpdpr.in/act/section-26/index.md)
- [DPDP Act Section 27: Powers and functions of Board](https://dpdpr.in/act/section-27/index.md)
- [DPDP Act Section 28: Procedure to be followed by Board](https://dpdpr.in/act/section-28/index.md)
- [DPDP Act Section 29: Appeal to Appellate Tribunal](https://dpdpr.in/act/section-29/index.md)
- [DPDP Act Section 30: Appellate Tribunal Orders as Decrees](https://dpdpr.in/act/section-30/index.md)
- [DPDP Act Section 31: Alternate dispute resolution](https://dpdpr.in/act/section-31/index.md)
- [DPDP Act Section 32: Voluntary undertaking](https://dpdpr.in/act/section-32/index.md)
- [DPDP Act Section 33: Penalties](https://dpdpr.in/act/section-33/index.md)
- [DPDP Act Section 34: Penalty Sums to Consolidated Fund](https://dpdpr.in/act/section-34/index.md)
- [DPDP Act Section 35: Protection of action taken in good faith](https://dpdpr.in/act/section-35/index.md)
- [DPDP Act Section 36: Power to call for information](https://dpdpr.in/act/section-36/index.md)
- [DPDP Act Section 37: Central Government Directions](https://dpdpr.in/act/section-37/index.md)
- [DPDP Act Section 38: Consistency with other laws](https://dpdpr.in/act/section-38/index.md)
- [DPDP Act Section 39: Bar of jurisdiction](https://dpdpr.in/act/section-39/index.md)
- [DPDP Act Section 40: Power to make rules](https://dpdpr.in/act/section-40/index.md)
- [DPDP Act Section 41: Laying of rules and certain notifications](https://dpdpr.in/act/section-41/index.md)
- [DPDP Act Section 42: Power to amend Schedule](https://dpdpr.in/act/section-42/index.md)
- [DPDP Act Section 43: Power to remove difficulties](https://dpdpr.in/act/section-43/index.md)
- [DPDP Act Section 44: Amendments to certain Acts](https://dpdpr.in/act/section-44/index.md)
- [DPDP Act Schedule: Penalties up to Rs 250 Crore](https://dpdpr.in/act/schedule/index.md)

## Rules

- [DPDP Rules 2025, Rule 1: Short title and commencement](https://dpdpr.in/rules/rule-1/index.md)
- [DPDP Rules 2025, Rule 2: Definitions](https://dpdpr.in/rules/rule-2/index.md)
- [DPDP Rules 2025, Rule 3: Notice by Data Fiduciary](https://dpdpr.in/rules/rule-3/index.md)
- [DPDP Rules 2025, Rule 4: Consent Manager Registration](https://dpdpr.in/rules/rule-4/index.md)
- [DPDP Rules 2025, Rule 5: Processing for Subsidies, Benefits](https://dpdpr.in/rules/rule-5/index.md)
- [DPDP Rules 2025, Rule 6: Reasonable security safeguards](https://dpdpr.in/rules/rule-6/index.md)
- [DPDP Rules 2025, Rule 7: Intimation of personal data breach](https://dpdpr.in/rules/rule-7/index.md)
- [DPDP Rules 2025, Rule 8: Data Retention and Erasure Period](https://dpdpr.in/rules/rule-8/index.md)
- [DPDP Rules 2025, Rule 9: Contact for Data Questions](https://dpdpr.in/rules/rule-9/index.md)
- [DPDP Rules 2025, Rule 10: Verifiable Consent for Children](https://dpdpr.in/rules/rule-10/index.md)
- [DPDP Rules 2025, Rule 11: Consent for Persons with Disability](https://dpdpr.in/rules/rule-11/index.md)
- [DPDP Rules 2025, Rule 12: Children's Data Exemptions](https://dpdpr.in/rules/rule-12/index.md)
- [DPDP Rules 2025, Rule 13: Significant Data Fiduciary Duties](https://dpdpr.in/rules/rule-13/index.md)
- [DPDP Rules 2025, Rule 14: Rights of Data Principals](https://dpdpr.in/rules/rule-14/index.md)
- [DPDP Rules 2025, Rule 15: Cross-Border Data Transfer](https://dpdpr.in/rules/rule-15/index.md)
- [DPDP Rules 2025, Rule 16: Research and Statistics Exemption](https://dpdpr.in/rules/rule-16/index.md)
- [DPDP Rules 2025, Rule 17: Appointment of Board Members](https://dpdpr.in/rules/rule-17/index.md)
- [DPDP Rules 2025, Rule 18: Board Members' Service Terms](https://dpdpr.in/rules/rule-18/index.md)
- [DPDP Rules 2025, Rule 19: Board Meetings and Orders](https://dpdpr.in/rules/rule-19/index.md)
- [DPDP Rules 2025, Rule 20: Board as a Digital Office](https://dpdpr.in/rules/rule-20/index.md)
- [DPDP Rules 2025, Rule 21: Board Officers' Service Terms](https://dpdpr.in/rules/rule-21/index.md)
- [DPDP Rules 2025, Rule 22: Appeal to Appellate Tribunal](https://dpdpr.in/rules/rule-22/index.md)
- [DPDP Rules 2025, Rule 23: Calling for Information](https://dpdpr.in/rules/rule-23/index.md)
- [DPDP Rules First Schedule: Consent Managers](https://dpdpr.in/rules/schedule-1/index.md)
- [DPDP Rules Second Schedule: State and Research Standards](https://dpdpr.in/rules/schedule-2/index.md)
- [DPDP Rules Third Schedule: Erasure periods for large platforms](https://dpdpr.in/rules/schedule-3/index.md)
- [DPDP Rules Fourth Schedule: Exemptions for children's data](https://dpdpr.in/rules/schedule-4/index.md)
- [DPDP Rules Fifth Schedule: Chairperson and Member Service Terms](https://dpdpr.in/rules/schedule-5/index.md)
- [DPDP Rules Sixth Schedule: Board Staff Service Terms](https://dpdpr.in/rules/schedule-6/index.md)
- [DPDP Rules Seventh Schedule: Purposes for calling for information](https://dpdpr.in/rules/schedule-7/index.md)

## Data

- [Sections JSON](https://dpdpr.in/data/sections.json)
- [Rules JSON](https://dpdpr.in/data/rules.json)
- [Deadlines JSON](https://dpdpr.in/data/deadlines.json)
- [Enforcement JSON](https://dpdpr.in/data/enforcement.json)
- [Glossary JSON](https://dpdpr.in/data/glossary.json)
- [JSON Feed](https://dpdpr.in/feed.json)
- [What changed (RSS)](https://dpdpr.in/changes.xml): new enforcement entries, start dates coming into force and official corrections
- [Sitemap](https://dpdpr.in/sitemap.xml): every page, for the full list

## Optional

- [Full text for LLMs](https://dpdpr.in/llms-full.txt)

## Official sources

- [The Digital Personal Data Protection Act, 2023 (No. 22 of 2023), Gazette of India Extraordinary, Part II Section 1, No. 25, 11 August 2023](https://www.meity.gov.in/static/uploads/2024/02/Digital-Personal-Data-Protection-Act-2023.pdf)
- [Digital Personal Data Protection Rules, 2025, G.S.R. 846(E), 13 November 2025](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf)
- [Notification G.S.R. 843(E), 13 November 2025, appointing commencement dates under section 1(2) of the Act](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf)
- [Notification G.S.R. 844(E), 13 November 2025, establishing the Data Protection Board of India](https://www.meity.gov.in/static/uploads/2025/11/cc217843dc3bcb37b2b05bcc3b4e031f.pdf)
- [Corrigendum G.S.R. 892(E), 10 December 2025, to the DPDP Rules, 2025](https://www.meity.gov.in/static/uploads/2025/12/3c7ebbae0e5456f493f486e6845df86b.pdf)
- [PIB: Government notifies Digital Personal Data Protection Rules, 2025 (14 November 2025)](https://www.pib.gov.in/PressReleasePage.aspx?PRID=2190014)
- [MeitY circular F. No. 2(1)/2026-Pers.I, 6 May 2026, inviting applications for Chairperson and Members of the Board](https://www.meity.gov.in/static/uploads/2026/05/cd481c027470b420b4cb85fb40a91c53.pdf)
- [Lok Sabha Unstarred Question No. 3960, answered 12 August 2026, Appointment of Chairperson and Members of the Data Protection Board of India](https://sansad.in/getFile/lsapps/loksabhaquestions/annex/188/AU3960_GyWSTk.pdf)
- [MeitY: Digital Personal Data Protection Rules 2025 (documents page)](https://www.meity.gov.in/documents/act-and-policies/digital-personal-data-protection-rules-2025-gDOxUjMtQWa)
- [Digital Personal Data Protection (Removal of Difficulties) Order, 2026, S.O. 5458(E), 5 October 2026, amending sections 9(1) and 10(2)(c)(ii) of the Act](https://www.meity.gov.in/static/uploads/2026/10/daf495a7b5798a3dfa72a944b51fc176.pdf)
- [Regulation (EU) 2016/679 (General Data Protection Regulation)](https://eur-lex.europa.eu/eli/reg/2016/679/oj)