DPDP Rules, 2025

    Rule by rule. Obligation by obligation.

    All 23 rules notified 13 November 2025 — statutory text, plain-language explanation, practical examples with commencement status, and the truConsent module that covers each operational obligation.

    For the full rule-by-rule legal breakdown, read DPDP Untangled's reference.

    Phase 1
    Phase 2
    On SDF notification
    On government notification
    Phase 1

    In force from 13 November 2025

    01

    Short Title and Commencement

    Phase 1
    02

    Definitions

    Phase 1
    04

    Registration and Obligations of Consent Manager

    Phase 1Consent Engine
    Phase 2

    Projected commencement May 2027

    03

    Notice Given by Data Fiduciary to Data Principal

    Phase 2Consent Engine
    05

    Processing by State and Its Instrumentalities

    Phase 2
    06

    Reasonable Security Safeguards

    Phase 2Minimum Security SafeguardsData Processor Management
    07

    Intimation of Personal Data Breach

    Phase 2Compliance Center
    08

    Time Period for Specified Purpose — Third Schedule

    Phase 2DPDP Navigator
    09

    Contact Information for Data Principal Queries

    Phase 2Rights Center
    10

    Verifiable Consent for Processing Personal Data of Children

    Phase 2Consent Engine
    11

    Verifiable Consent for Persons with Disability

    Phase 2Consent Engine
    12

    Exemptions from Children's Data Obligations

    Phase 2Consent Engine
    14

    Rights of Data Principals — Operational Requirements

    Phase 2Rights Center
    16

    Exemption for Research, Archiving and Statistical Purposes

    Phase 2
    22

    Appeal to Appellate Tribunal

    Phase 2
    23

    Calling for Information from Data Fiduciaries

    Phase 2

    Conditional commencement

    13

    Additional Obligations of Significant Data Fiduciary

    On SDF notificationAudits and Assessment Center
    15

    Transfer of Personal Data Outside India

    On government notification

    Digital Personal Data Protection Rules, 2025

    Official Gazette notification. All 23 rules with all Schedules.

    DPDP Act, 2023

    The parent statute. All 44 sections across 9 chapters.

    Build your DPDP Rules compliance stack

    A 30-minute demo covers which rules apply to your sector and what implementation looks like before May 2027.