---
title: "DPDP Rules 2025: All 23 Rules and 7 Schedules | dpdpr.in"
description: "The DPDP Rules 2025, notified 13 November 2025: all 23 rules and 7 Schedules with plain-English summaries and the date each one takes effect."
url: "https://dpdpr.in/rules/"
canonical: "https://dpdpr.in/rules/"
site: "dpdpr.in"
updated: "2026-11-02"
disclaimer: "Independent reference, not legal advice. Not affiliated with the Government of India or MeitY."
---

# The DPDP Rules, 2025: all rules and Schedules

The Digital Personal Data Protection Rules, 2025 (G.S.R. 846(E), 13 November 2025) have 23 rules and 7 Schedules. [Official PDF (MeitY copy of the Gazette)](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf), corrected by [corrigendum G.S.R. 892(E)](https://www.meity.gov.in/static/uploads/2025/12/3c7ebbae0e5456f493f486e6845df86b.pdf).

## Rules

1. [1. Short title and commencement](https://dpdpr.in/rules/rule-1/) In force
2. [2. Definitions](https://dpdpr.in/rules/rule-2/) In force
3. [3. Notice given by Data Fiduciary to Data Principal](https://dpdpr.in/rules/rule-3/) From 13 May 2027
4. [4. Registration and obligations of Consent Manager](https://dpdpr.in/rules/rule-4/) From 13 November 2026
5. [5. Processing of personal data for provision or issue of subsidy, benefit, service, certificate, licence or permit by State and its instrumentalities](https://dpdpr.in/rules/rule-5/) From 13 May 2027
6. [6. Reasonable security safeguards](https://dpdpr.in/rules/rule-6/) From 13 May 2027
7. [7. Intimation of personal data breach](https://dpdpr.in/rules/rule-7/) From 13 May 2027
8. [8. Time period for specified purpose to be deemed as no longer being served](https://dpdpr.in/rules/rule-8/) From 13 May 2027
9. [9. Contact information of person to answer questions about processing](https://dpdpr.in/rules/rule-9/) From 13 May 2027
10. [10. Verifiable consent for processing of personal data of child](https://dpdpr.in/rules/rule-10/) From 13 May 2027
11. [11. Verifiable consent for processing of personal data of person with disability who has lawful guardian](https://dpdpr.in/rules/rule-11/) From 13 May 2027
12. [12. Exemptions from certain obligations applicable to processing of personal data of child](https://dpdpr.in/rules/rule-12/) From 13 May 2027
13. [13. Additional obligations of Significant Data Fiduciary](https://dpdpr.in/rules/rule-13/) From 13 May 2027
14. [14. Rights of Data Principals](https://dpdpr.in/rules/rule-14/) From 13 May 2027
15. [15. Transfer of personal data outside the territory of India](https://dpdpr.in/rules/rule-15/) From 13 May 2027
16. [16. Exemption from Act for research, archiving or statistical purposes](https://dpdpr.in/rules/rule-16/) From 13 May 2027
17. [17. Appointment of Chairperson and other Members](https://dpdpr.in/rules/rule-17/) In force
18. [18. Salary, allowances and other terms and conditions of service of Chairperson and other Members](https://dpdpr.in/rules/rule-18/) In force
19. [19. Procedure for meetings of Board and authentication of its orders, directions and instruments](https://dpdpr.in/rules/rule-19/) In force
20. [20. Functioning of Board as digital office](https://dpdpr.in/rules/rule-20/) In force
21. [21. Terms and conditions of appointment and service of officers and employees of Board](https://dpdpr.in/rules/rule-21/) In force
22. [22. Appeal to Appellate Tribunal](https://dpdpr.in/rules/rule-22/) From 13 May 2027
23. [23. Calling for information from Data Fiduciary or intermediary](https://dpdpr.in/rules/rule-23/) From 13 May 2027

## Schedules

- [First Consent Managers](https://dpdpr.in/rules/schedule-1/) From 13 November 2026
- [Second Standards for State processing and research](https://dpdpr.in/rules/schedule-2/) From 13 May 2027
- [Third Erasure periods for large platforms](https://dpdpr.in/rules/schedule-3/) From 13 May 2027
- [Fourth Exemptions for children's data](https://dpdpr.in/rules/schedule-4/) From 13 May 2027
- [Fifth Terms of service of Chairperson and Members](https://dpdpr.in/rules/schedule-5/) In force
- [Sixth Terms of service of Board officers and employees](https://dpdpr.in/rules/schedule-6/) In force
- [Seventh Purposes for calling for information](https://dpdpr.in/rules/schedule-7/) From 13 May 2027