dpdpr.in

The DPDP Rules, 2025: all rules and Schedules

The Digital Personal Data Protection Rules, 2025 (G.S.R. 846(E), 13 November 2025) have 23 rules and 7 Schedules. Official PDF (MeitY copy of the Gazette), corrected by corrigendum G.S.R. 892(E).

Rules

  1. 1. Short title and commencement In force
  2. 2. Definitions In force
  3. 3. Notice given by Data Fiduciary to Data Principal From 13 May 2027
  4. 4. Registration and obligations of Consent Manager From 13 November 2026
  5. 5. Processing of personal data for provision or issue of subsidy, benefit, service, certificate, licence or permit by State and its instrumentalities From 13 May 2027
  6. 6. Reasonable security safeguards From 13 May 2027
  7. 7. Intimation of personal data breach From 13 May 2027
  8. 8. Time period for specified purpose to be deemed as no longer being served From 13 May 2027
  9. 9. Contact information of person to answer questions about processing From 13 May 2027
  10. 10. Verifiable consent for processing of personal data of child From 13 May 2027
  11. 11. Verifiable consent for processing of personal data of person with disability who has lawful guardian From 13 May 2027
  12. 12. Exemptions from certain obligations applicable to processing of personal data of child From 13 May 2027
  13. 13. Additional obligations of Significant Data Fiduciary From 13 May 2027
  14. 14. Rights of Data Principals From 13 May 2027
  15. 15. Transfer of personal data outside the territory of India From 13 May 2027
  16. 16. Exemption from Act for research, archiving or statistical purposes From 13 May 2027
  17. 17. Appointment of Chairperson and other Members In force
  18. 18. Salary, allowances and other terms and conditions of service of Chairperson and other Members In force
  19. 19. Procedure for meetings of Board and authentication of its orders, directions and instruments In force
  20. 20. Functioning of Board as digital office In force
  21. 21. Terms and conditions of appointment and service of officers and employees of Board In force
  22. 22. Appeal to Appellate Tribunal From 13 May 2027
  23. 23. Calling for information from Data Fiduciary or intermediary From 13 May 2027

Schedules

On this page
  1. Rules
  2. Schedules