dpdpr.in

Rule 15. Transfer of personal data outside the territory of India

DPDP Rules, 2025 · G.S.R. 846(E)

In simple words

Personal data can go abroad, but companies must meet any requirements the Government sets by order about making data available to a foreign State or entities it controls.

What this means for you
Your data can be processed abroad, within limits set by the Government.
What this means for businesses
Watch for Government orders under this rule.
Everyday example
A travel booking site using a foreign server must follow any order about sharing data with foreign governments.

Who it applies to

Data Fiduciaries transferring data outside India.

Related sections and Schedules

Official textas notified

Source: MeitY copy of the Gazette, page 30. Printed dashes are shown as colons; the wording is unchanged.

Any personal data processed by a Data Fiduciary under the Act may be transferred outside the territory of India subject to the restriction that the Data Fiduciary shall meet such requirements as the Central Government may, by general or special order, specify in respect of making such personal data available to any foreign State, or to any person or entity under the control of or any agency of such a State.

On this page
  1. In simple words
  2. Who it applies to
  3. Related provisions
  4. Official text