Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025

Reference

G.S.R. 843(E)

Issued

13 Nov 2025

Effective

Phased · full data-fiduciary obligations 13 May 2027

Scope

Per-purpose consent; breach notice to Data Protection Board and affected principals ≤ 72 h; grievance resolution ≤ 90 days; penalties up to ₹250 crore.

Key clauses

• Rule 7Breach notice to the Data Protection Board and affected principals within 72 hours.

No internal documents linked yet.