India · Privacy & Data Protection
The country's own data-protection regime, registration duties, and its official supervisory authority.
AI-drafted, editorially reviewed. Confirm specifics with the official authority.
The Digital Personal Data Protection Act 2023 is India's data-protection statute, and its rules were notified in November 2025. It commences in phases: the Data Protection Board of India was established immediately, the consent-manager provisions follow on 13 November 2026, and the core operational obligations on data fiduciaries take effect on 13 May 2027. Until each phase bites, the Information Technology Act 2000 and its rules remain the operative framework.
- The DPDP Act commences in phases; its core obligations take effect on 13 May 2027.
- The Data Protection Board of India is the enforcement body under the Act.
- The Information Technology Act 2000 and its rules still govern where the DPDP Act has not yet commenced.
Official authorities
- Ministry of Electronics and Information Technology (MeitY)
DPDP Act, rules and notifications.
Official-information aggregation, not legal advice. Always verify on the authority's own site.