Rule 2 — DPDP Rules, 2025

    Definitions

    Phase 1 — 13 November 2025Download full Rules PDF

    Rule Text

    In these rules, unless the context otherwise requires—
    (a) "Act" means the Digital Personal Data Protection Act, 2023;
    (b) "Board" means the Data Protection Board of India;
    (c) "Form" means a Form specified in the First Schedule to these rules;
    (d) "Schedule" means a Schedule appended to these rules;
    and words and expressions used herein and not defined shall have the meanings respectively assigned to them in the Act.

    Source: Digital Personal Data Protection Rules, 2025. Official text available at truconsent.io/resources/dpdp-rules.pdf.

    What This Means

    Rule 2 adds only four terms to the Act's own twenty-eight definitions. It deliberately keeps the glossary minimal — the Rules use the Act's vocabulary throughout and do not redefine any term the Act already covers. The First Schedule referenced in Rule 2(c) contains the prescribed forms for Board proceedings and appeals.

    Related Rules

    Act Sections This Rule Implements

    Need the full rule-by-rule breakdown?

    DPDP Untangled covers every rule in plain language, cross-linked to the Act sections it implements.

    See how truConsent implements this obligation

    A 30-minute demo covers your specific DPDP Rules obligations and the modules that handle them.