Start here
New here? Start with the basics
What the Act covers, who it binds, and how the Rules fit, in plain English.
What is in force today
19 of 44 sections and 7 of 23 rules are in force. See every phase and date.
Read the Act
All 44 sections across 9 chapters, plus the Schedule of penalties.
Read the Rules
The 23 rules and 7 schedules notified on 13 Nov 2025.
Glossary
32 defined terms with official definitions and plain-English meanings.
Ask DPDP
Ask in plain words; get an answer built only from the official text, with citations.
The Act, chapter by chapter
Full arrangement of sections- Ch. IPreliminarySections 1–3
- Ch. IIObligations of data fiduciarySections 4–10
- Ch. IIIRights and duties of data principalSections 11–15
- Ch. IVSpecial provisionsSections 16–17
- Ch. VData protection board of indiaSections 18–26
- Ch. VIPowers, functions and procedure to be followed by boardSections 27–28
- Ch. VIIAppeal and alternate dispute resolutionSections 29–32
- Ch. VIIIPenalties and adjudicationSections 33–34
- Ch. IXMiscellaneousSections 35–44
Coming into force next
Full timeline- Commencement of the Act, second phase
By G.S.R. 843(E), sections 6, 27 of the Act come into force on this date (one year from the date of publication of the Gazette). Where only part of a section is appointed, the section's own commencement entry in the Act records which sub-sections are covered.
- Commencement of the Rules, rule 4
Under rule 1(3) of the Digital Personal Data Protection Rules, 2025, rules 4 come into force on this date (one year after the date of publication).
- Commencement of the Act, third phase
By G.S.R. 843(E), sections 3 to 17, 27 to 34, 36, 37, 44 of the Act come into force on this date (eighteen months from the date of publication of the Gazette). Where only part of a section is appointed, the section's own commencement entry in the Act records which sub-sections are covered.
Guides for your role
All guidesWhat is the DPDP Act? A plain-English introduction
A plain-English introduction to India's Digital Personal Data Protection Act, 2023, covering what it applies to, who…
Who does the DPDP Act apply to?
How section 3 draws the boundary of the DPDP Act, what falls outside it, and every exemption in section 17, explained…
Key dates: when each part of the DPDP Act and Rules comes into force
The three commencement dates set by G.S.R. 843(E) and rule 1 of the DPDP Rules, 2025, with what is live now and what…
The DPDP Rules, 2025 explained: what each rule does
A rule-by-rule walkthrough of the DPDP Rules, 2025, with the parent section of the Act for each rule and a summary of…
Consent, notice and Consent Managers under the DPDP Act
How consent must be obtained, what the notice must say, how consent is withdrawn, and what a registered Consent…
Data Fiduciary obligations: a plain-English checklist
Every obligation section 8 places on a Data Fiduciary, with the rules on security, breach reporting, erasure, contacts…
Latest official instruments
All notificationsOfficial updates, collected daily
All updatesThe collector checked the official feeds on 9 September 2026 and found nothing new in the last 120 days beyond the documents already in the wiki. Older Parliament answers and notifications are under Official updates.
/MYND · DPDP practice
Reading the law is step one. Running it is the work.
MYND has run payroll, finance and statutory compliance for 1,000+ organisations for 25 years, which means the personal data of millions of employees and vendors has always flowed through our systems. We turned that experience into DPDP programmes: readiness assessments, consent and notice design, processor contracts, breach playbooks and training. Tell us where you are and a compliance lead will reply within one working day.
- 25 yearsof payroll, finance and statutory compliance
- 1,000+clients across 50+ countries
- 6M+payslips a year, personal data handled with care
- 99%compliance accuracy across engagements