Reference
The DPDP Act 2023
The Digital Personal Data Protection Act 2023 (Act No. 22 of 2023) was enacted on 11 August 2023 and commences in three phases under notification G.S.R. 843(E) of 13 November 2025. Pick a section from the contents list to read its official Gazette text, its commencement status and the exact source behind every claim.
17 of 44 sections currently publish with verified Gazette text, alongside the Schedule of monetary penalties. The rest are being ingested from the official print and appear in the contents list once source verification passes.
How the Act commences
Notification G.S.R. 843(E), published in Gazette issue No. 757 with printed date 13 November 2025, brings the Act into force in three groups. Computed future dates are presented as interpretation until officially confirmed.
13 November 2025· official
Sections 1(2) and 2, sections 18 to 26, sections 35 and 38 to 43, and section 44(1) and (3) of the Act
13 November 2026· computed date, interpretation until officially confirmed
Section 6(9) and section 27(1)(d) of the Act
13 May 2027· computed date, interpretation until officially confirmed
Sections 3 to 5, section 6(1) to (8) and (10), sections 7 to 17, section 27 other than section 27(1)(d), sections 28 to 34, sections 36 and 37, and section 44(2) of the Act
For the full history from the Puttaswamy judgment to the latest notification, see the DPDP timeline. To check what applies to your organisation, start with the applicability checker.