Skip to main content

The 3rd and main DPDP commencement date is computed as 13 May 2027, which is interpretation until officially confirmed.

dpdprules.org
Data breached?
☰

Sources last verified on 9 October 2026. Methodology

Concept

Consent Manager

A person registered with the Board who gives individuals a single point of contact to give, manage, review and withdraw their consent through an accessible, transparent and interoperable platform. Registration rests on section 6(9) of the Act and Rule 4, which applies the conditions and obligations in the First Schedule. Both commence on 13 November 2026, a date computed from the notifications, so treat it as interpretation until officially confirmed. The duty under section 6(8) to act on the individual's behalf follows on a computed 13 May 2027, on the same basis.

Official requirement · verbatim

“Consent Manager” means a person registered with the Board, who acts as a single point of contact to enable a Data Principal to give, manage, review and withdraw her consent through an accessible, transparent and interoperable platform

Read section 2 of the Act, where this term is defined →Rule 4 of the DPDP Rules 2025 →

What the definition covers

Plain English

Section 2(g) defines a Consent Manager as a person registered with the Board who acts as a single point of contact to enable a Data Principal to give, manage, review and withdraw her consent through an accessible, transparent and interoperable platform. Section 6(7) lets a Data Principal give, manage, review or withdraw her consent to a Data Fiduciary through a Consent Manager. Section 6(8) makes the Consent Manager accountable to the Data Principal and requires it to act on her behalf in the manner and subject to the obligations prescribed, and section 6(9) requires every Consent Manager to be registered with the Board in the manner and subject to the technical, operational, financial and other conditions prescribed. The definition has been in force since 13 November 2025. Section 6(9) commences on 13 November 2026 under paragraph (b) of the commencement notification, and sections 6(7) and 6(8) on 13 May 2027 under paragraph (c); both dates are computed, so treat them as interpretation until officially confirmed.

Plain English

Rule 4 sets up registration. A person who fulfils the conditions in Part A of the First Schedule may apply to the Board, furnishing the particulars, information and documents the Board publishes on its website. The Board may make such inquiry as it deems fit and then either registers the applicant and publishes its particulars on its website, or rejects the application and communicates the reasons. Part A has 9 conditions: the applicant is a company incorporated in India; it has sufficient capacity, including technical, operational and financial capacity, to fulfil its obligations; its financial condition and the general character of its management are sound; its net worth is not less than 2 crore rupees; the volume of business likely to be available to it and its capital structure and earning prospects are adequate; its directors, key managerial personnel and senior management have a general reputation and record of fairness and integrity; its memorandum and articles of association require adherence to the conflict of interest obligations in items 9 and 10 of Part B, require policies and procedures to ensure that adherence, and allow those provisions to be amended only with the previous approval of the Board; its proposed operations are in the interests of Data Principals; and it is independently certified that its platform is consistent with the data protection standards and assurance framework the Board may publish, and that appropriate technical and organisational measures are in place to adhere to them and to observe the disclosure obligations in item 11 of Part B. Rule 4 commences on 13 November 2026, a date computed from Rule 1(3) and the publication of the Rules on 13 November 2025, so treat it as interpretation until officially confirmed.

Plain English

Rule 4(3) gives the Consent Manager the obligations in Part B of the First Schedule, which has 13 items. It must enable a Data Principal using its platform to give consent to a Data Fiduciary onboarded onto the platform, either directly or through another onboarded Data Fiduciary that maintains the personal data with her consent; make personal data available or share it in a manner such that the contents are not readable by it; keep a record of consents given, denied or withdrawn, of notices preceding or accompanying requests for consent and of sharing with a transferee Data Fiduciary; give her access to that record, make it available to her on request in machine readable form in accordance with its terms of service, and maintain it for at least 7 years or any longer period agreed with her or required by law; maintain a website or app, or both, as the primary means of access; not sub contract or assign the performance of its obligations; take reasonable security safeguards to prevent personal data breach; act in a fiduciary capacity in relation to the Data Principal; avoid conflicts of interest with Data Fiduciaries, including in respect of their promoters and key managerial personnel, and have measures to ensure no conflict of interest arises on account of its directors, key managerial personnel and senior management holding a directorship, financial interest, employment or beneficial ownership in Data Fiduciaries, or having a material pecuniary relationship with them; publish in an easily accessible manner, on its website or app, or both, information about its promoters, directors, key managerial personnel and senior management, every person holding more than 2 per cent of its shares, every body corporate in whose shares any of its promoters, directors, key managerial personnel or senior management holds more than 2 per cent as on the first day of the preceding calendar month, and any other information the Board directs it to disclose in the interests of transparency; have effective audit mechanisms to review, monitor, evaluate and report the outcome of the audit to the Board, periodically and on such other occasions as the Board may direct, on its technical and organisational controls, systems, procedures and safeguards, its continued fulfilment of the conditions of registration and its adherence to its obligations under the Act and the Rules; and not let control of the company be transferred by way of sale, merger or otherwise, except with the previous approval of the Board and subject to such conditions as the Board may specify. Under Rule 4(4), if the Board is of the opinion that a Consent Manager is not adhering to the conditions and obligations under Rule 4, it may, after giving an opportunity of being heard, inform the Consent Manager of that failure and direct it to take measures to ensure adherence. Under Rule 4(5), if satisfied that it is necessary in the interests of Data Principals, the Board may, after giving the Consent Manager an opportunity of being heard, by order for reasons recorded in writing, suspend or cancel its registration and give it directions to protect the interests of Data Principals. Under Rule 4(6) the Board may require the Consent Manager to furnish information it calls for. Rule 4 commences on 13 November 2026, a date computed from Rule 1(3) and the publication of the Rules on 13 November 2025, so treat it as interpretation until officially confirmed.

Plain English

Section 13(1) gives a Data Principal the right to readily available means of grievance redressal provided by a Consent Manager in respect of any act or omission of the Consent Manager regarding the performance of its obligations in relation to her personal data or the exercise of her rights, and section 13(2) requires the Consent Manager to respond within the prescribed period. Under section 13(3) the Data Principal must exhaust that opportunity of redressing her grievance before approaching the Board. Rule 14(1) requires the Consent Manager, where applicable, to prominently publish on its website or app the means by which a Data Principal may make a request to exercise her rights and any particulars, such as a username or other identifier, that may be required to identify her under its terms of service, and Rule 14(3), which names every Data Fiduciary and Consent Manager, refers to a reasonable period not exceeding 90 days for responding to grievances under its grievance redressal system and requires appropriate technical and organisational measures to ensure the system responds within that period; the printed sentence does not itself say what is to be published. On the Board's side, section 27(1)(c) lets it inquire, on a complaint by a Data Principal, into a breach by a Consent Manager of its obligations in relation to her personal data and impose penalty, and section 27(1)(d) lets it inquire, on receipt of an intimation, into a breach of any condition of registration of a Consent Manager and impose penalty. Section 27(1)(d) commences on 13 November 2026 under paragraph (b) of the commencement notification; sections 13 and 27(1)(c) commence on 13 May 2027 under paragraph (c), and Rule 14 on the same date under Rule 1(4). These dates are computed, so treat them as interpretation until officially confirmed.

Interpretation requires judgment

The Schedule to the Act has no entry that names a Consent Manager. Section 33(1) lets the Board impose a penalty specified in the Schedule where it determines, on conclusion of an inquiry, that a breach of the Act or the Rules by a person is significant, after giving that person an opportunity of being heard, and the entry whose words reach a Consent Manager's breach of section 6 or of its Rule 4 conditions and obligations is item 7, breach of any other provision of the Act or the rules made thereunder, with a penalty that may extend to 50 crore rupees. Until the Board or a court decides a case, which entry it applies to a Consent Manager is a reading of the Schedule rather than a stated rule. Rule 4 commences on 13 November 2026, a date computed from Rule 1(3) and the publication of the Rules on 13 November 2025, and section 6(9) on the same date under paragraph (b) of the commencement notification; sections 6(1) to 6(8), 6(10) and 33 commence on 13 May 2027 under paragraph (c); both dates are computed, so treat them as interpretation until officially confirmed.

Articles that use this term

Sources cited on this page

  1. [1]
    The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), s. 2(g), p. 2. Published 11 August 2023. Official source ↗ · Official requirement · Verified 17 August 2026In force since 13 November 2025
    Also cited on this page · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026
  2. [2]
    The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), s. 6(7), p. 6. Published 11 August 2023. Official source ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Phased commencement; it commences in 2 parts: sub section (9) on the computed date 13 November 2026, which is interpretation until officially confirmed, then the rest on the computed date 13 May 2027, which is interpretation until officially confirmed
  3. [3]
    The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), s. 6(8), p. 6. Published 11 August 2023. Official source ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Phased commencement; it commences in 2 parts: sub section (9) on the computed date 13 November 2026, which is interpretation until officially confirmed, then the rest on the computed date 13 May 2027, which is interpretation until officially confirmed
  4. [4]
    The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), s. 6(9), p. 6. Published 11 August 2023. Official source ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Phased commencement; it commences in 2 parts: sub section (9) on the computed date 13 November 2026, which is interpretation until officially confirmed, then the rest on the computed date 13 May 2027, which is interpretation until officially confirmed
  5. [5]
    Commencement notification for the Digital Personal Data Protection Act, 2023 (G.S.R. 843(E)), (a), p. 2. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Document status: published; in effect per its own terms
  6. [6]
    Commencement notification for the Digital Personal Data Protection Act, 2023 (G.S.R. 843(E)), (b), p. 2. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Document status: published; in effect per its own terms
    Also cited on this page · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026
  7. [7]
    Commencement notification for the Digital Personal Data Protection Act, 2023 (G.S.R. 843(E)), (c), p. 2. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Document status: published; in effect per its own terms
    Also cited on this page · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026
  8. [8]
    Commencement notification for the Digital Personal Data Protection Act, 2023 (G.S.R. 843(E)), (c), p. 2. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Document status: published; in effect per its own terms
    Also cited on this page · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026
  9. [9]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 4, (1), p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  10. [10]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 4, (2), p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  11. [11]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 4, (2)(a), p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  12. [12]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 4, (2)(b), p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  13. [13]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part A, p. 32. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  14. [14]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part A, p. 32. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  15. [15]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part A, p. 32. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  16. [16]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part A, p. 32. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  17. [17]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part A, p. 32. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  18. [18]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part A, p. 32. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  19. [19]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part A, p. 32. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  20. [20]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part A, p. 32. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  21. [21]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part A, p. 32. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  22. [22]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part A, p. 32. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  23. [23]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 1, (3), p. 24. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026In force since 13 November 2025
    Also cited on this page · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026
  24. [24]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), notification heading, p. 24. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Document status: published; text subject to corrigendum G.S.R. 892(E)
    Also cited on this page · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026
  25. [25]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 4, (3), p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  26. [26]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 32. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  27. [27]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  28. [28]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  29. [29]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  30. [30]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  31. [31]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  32. [32]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  33. [33]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  34. [34]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  35. [35]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  36. [36]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  37. [37]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  38. [38]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  39. [39]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  40. [40]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  41. [41]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  42. [42]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 34. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  43. [43]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 34. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  44. [44]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 34. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  45. [45]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 34. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  46. [46]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 34. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  47. [47]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 4, (4), p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  48. [48]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 4, (4), p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  49. [49]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 4, (5), p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  50. [50]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  51. [51]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 33. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  52. [52]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 34. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  53. [53]
    Corrigenda to the Digital Personal Data Protection Rules, 2025 (G.S.R. 892(E)), (iv)(a), p. 1. Published 11 December 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Official correction to the printed text, quoted · Verified 5 October 2026Document status: published; in effect
  54. [54]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 34. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  55. [55]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 34. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  56. [56]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), First Schedule, Part B, p. 34. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  57. [57]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 4, (5), p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  58. [58]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 4, (5)(b), p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  59. [59]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 4, (6), p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  60. [60]
    The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), s. 13(1), p. 10. Published 11 August 2023. Official source ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed
  61. [61]
    The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), s. 13(2), p. 10. Published 11 August 2023. Official source ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed
  62. [62]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 14, (1), p. 29. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed
  63. [63]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 14, (1)(a), p. 30. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed
  64. [64]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 14, (1)(b), p. 30. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed
  65. [65]
    The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), s. 13(3), p. 10. Published 11 August 2023. Official source ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed
  66. [66]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 14, (3), p. 30. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed
  67. [67]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 14, (3), p. 30. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed
  68. [68]
    The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), s. 27(1)(c), p. 14. Published 11 August 2023. Official source ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Phased commencement; it commences in 2 parts: clause (d) of sub section (1) on the computed date 13 November 2026, which is interpretation until officially confirmed, then the rest on the computed date 13 May 2027, which is interpretation until officially confirmed
  69. [69]
    The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), s. 27(1)(d), p. 14. Published 11 August 2023. Official source ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Phased commencement; it commences in 2 parts: clause (d) of sub section (1) on the computed date 13 November 2026, which is interpretation until officially confirmed, then the rest on the computed date 13 May 2027, which is interpretation until officially confirmed
  70. [70]
    Commencement notification for the Digital Personal Data Protection Act, 2023 (G.S.R. 843(E)), (b), p. 2. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Document status: published; in effect per its own terms
  71. [71]
    Commencement notification for the Digital Personal Data Protection Act, 2023 (G.S.R. 843(E)), (c), p. 2. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Document status: published; in effect per its own terms
  72. [72]
    Commencement notification for the Digital Personal Data Protection Act, 2023 (G.S.R. 843(E)), (c), p. 2. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Document status: published; in effect per its own terms
  73. [73]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 1, (4), p. 24. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026In force since 13 November 2025
  74. [74]
    The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), s. 33(1), p. 16. Published 11 August 2023. Official source ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed
  75. [75]
    The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), s. 33(1), p. 17. Published 11 August 2023. Official source ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed
  76. [76]
    The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), The Schedule, p. 21. Published 11 August 2023. Official source ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed
  77. [77]
    The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), The Schedule, p. 21. Published 11 August 2023. Official source ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed
  78. [78]
    Commencement notification for the Digital Personal Data Protection Act, 2023 (G.S.R. 843(E)), (c), p. 2. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · The source's own words, quoted; not a requirement of the DPDP framework · Verified 5 October 2026Document status: published; in effect per its own terms