---
title: "The Digital Personal Data Protection Rules, 2025"
url: https://dpdp.myndsolution.com/wiki/rules/
description: "Full official text of the DPDP Rules, 2025 (G.S.R. 846(E), notified 13 November 2025): all 23 rules and 7 schedules with commencement status, parent…"
kind: rules
updated: 2026-09-09
official_source: https://egazette.gov.in/WriteReadData/2025/267650.pdf
publisher: MYND Integrated Solutions
license: Official Government of India texts are reproduced verbatim (public domain / open government data). Interpretation is CC BY 4.0, MYND Integrated Solutions.
disclaimer: Not legal advice. Official text prevails over any interpretation.
html_version: https://dpdp.myndsolution.com/wiki/rules/
---
# The Digital Personal Data Protection Rules, 2025

G.S.R. 846(E), notified 13 November 2025.

## Rules

- [Rule 1: Short title and commencement](https://dpdp.myndsolution.com/wiki/rules/rule-1-short-title-and-commencement/) — In force since 13 November 2025
- [Rule 2: Definitions](https://dpdp.myndsolution.com/wiki/rules/rule-2-definitions/) — In force since 13 November 2025
- [Rule 3: Notice given by Data Fiduciary to Data Principal](https://dpdp.myndsolution.com/wiki/rules/rule-3-notice-given-by-data-fiduciary-to-data-principal/) — Comes into force on 13 May 2027
- [Rule 4: Registration and obligations of Consent Manager](https://dpdp.myndsolution.com/wiki/rules/rule-4-registration-and-obligations-of-consent-manager/) — Comes into force on 13 November 2026
- [Rule 5: Processing of personal data for provision or issue of subsidy, benefit, service, certificate, licence or permit by State and its instrumentalities](https://dpdp.myndsolution.com/wiki/rules/rule-5-processing-of-personal-data-for-provision-or-issue-of/) — Comes into force on 13 May 2027
- [Rule 6: Reasonable security safeguards](https://dpdp.myndsolution.com/wiki/rules/rule-6-reasonable-security-safeguards/) — Comes into force on 13 May 2027
- [Rule 7: Intimation of personal data breach](https://dpdp.myndsolution.com/wiki/rules/rule-7-intimation-of-personal-data-breach/) — Comes into force on 13 May 2027
- [Rule 8: Time period for specified purpose to be deemed as no longer being served](https://dpdp.myndsolution.com/wiki/rules/rule-8-time-period-for-specified-purpose-to-be-deemed-as-no-longer/) — Comes into force on 13 May 2027
- [Rule 9: Contact information of person to answer questions about processing](https://dpdp.myndsolution.com/wiki/rules/rule-9-contact-information-of-person-to-answer-questions-about/) — Comes into force on 13 May 2027
- [Rule 10: Verifiable consent for processing of personal data of child](https://dpdp.myndsolution.com/wiki/rules/rule-10-verifiable-consent-for-processing-of-personal-data-of-child/) — Comes into force on 13 May 2027
- [Rule 11: Verifiable consent for processing of personal data of person with disability who has lawful guardian](https://dpdp.myndsolution.com/wiki/rules/rule-11-verifiable-consent-for-processing-of-personal-data-of-person/) — Comes into force on 13 May 2027
- [Rule 12: Exemptions from certain obligations applicable to processing of personal data of child](https://dpdp.myndsolution.com/wiki/rules/rule-12-exemptions-from-certain-obligations-applicable-to-processing/) — Comes into force on 13 May 2027
- [Rule 13: Additional obligations of Significant Data Fiduciary](https://dpdp.myndsolution.com/wiki/rules/rule-13-additional-obligations-of-significant-data-fiduciary/) — Comes into force on 13 May 2027
- [Rule 14: Rights of Data Principals](https://dpdp.myndsolution.com/wiki/rules/rule-14-rights-of-data-principals/) — Comes into force on 13 May 2027
- [Rule 15: Transfer of personal data outside the territory of India](https://dpdp.myndsolution.com/wiki/rules/rule-15-transfer-of-personal-data-outside-the-territory-of-india/) — Comes into force on 13 May 2027
- [Rule 16: Exemption from Act for research, archiving or statistical purposes](https://dpdp.myndsolution.com/wiki/rules/rule-16-exemption-from-act-for-research-archiving-or-statistical/) — Comes into force on 13 May 2027
- [Rule 17: Appointment of Chairperson and other Members](https://dpdp.myndsolution.com/wiki/rules/rule-17-appointment-of-chairperson-and-other-members/) — In force since 13 November 2025
- [Rule 18: Salary, allowances and other terms and conditions of service of Chairperson and other Members](https://dpdp.myndsolution.com/wiki/rules/rule-18-salary-allowances-and-other-terms-and-conditions-of-service/) — In force since 13 November 2025
- [Rule 19: Procedure for meetings of Board and authentication of its orders, directions and instruments](https://dpdp.myndsolution.com/wiki/rules/rule-19-procedure-for-meetings-of-board-and-authentication-of-its/) — In force since 13 November 2025
- [Rule 20: Functioning of Board as digital office](https://dpdp.myndsolution.com/wiki/rules/rule-20-functioning-of-board-as-digital-office/) — In force since 13 November 2025
- [Rule 21: Terms and conditions of appointment and service of officers and employees of Board](https://dpdp.myndsolution.com/wiki/rules/rule-21-terms-and-conditions-of-appointment-and-service-of-officers/) — In force since 13 November 2025
- [Rule 22: Appeal to Appellate Tribunal](https://dpdp.myndsolution.com/wiki/rules/rule-22-appeal-to-appellate-tribunal/) — Comes into force on 13 May 2027
- [Rule 23: Calling for information from Data Fiduciary or intermediary](https://dpdp.myndsolution.com/wiki/rules/rule-23-calling-for-information-from-data-fiduciary-or-intermediary/) — Comes into force on 13 May 2027

## Schedules

- [First Schedule: Conditions for registration of Consent Manager; Obligations of Consent Manager](https://dpdp.myndsolution.com/wiki/rules/schedule-1-conditions-for-registration-of-consent-manager-obligations/)
- [Second Schedule: Standards for processing of personal data by State and its instrumentalities under clause (b) of section 7 and for processing of personal data necessary for the purposes specified in clause (b) of sub-section (2) of section 17](https://dpdp.myndsolution.com/wiki/rules/schedule-2-standards-for-processing-of-personal-data-by-state-and-its/)
- [Third Schedule: Class of Data Fiduciaries, Purposes, Time period](https://dpdp.myndsolution.com/wiki/rules/schedule-3-class-of-data-fiduciaries-purposes-time-period/)
- [Fourth Schedule: Classes of Data Fiduciaries in respect of whom provisions of sub-sections (1) and (3) of section 9 shall not apply; Purposes for which provisions of sub-sections (1) and (3) of section 9 shall not apply](https://dpdp.myndsolution.com/wiki/rules/schedule-4-classes-of-data-fiduciaries-in-respect-of-whom-provisions-of/)
- [Fifth Schedule: Terms and conditions of service of Chairperson and other Members](https://dpdp.myndsolution.com/wiki/rules/schedule-5-terms-and-conditions-of-service-of-chairperson-and-other/)
- [Sixth Schedule: Terms and conditions of appointment and service of officers and employees of Board](https://dpdp.myndsolution.com/wiki/rules/schedule-6-terms-and-conditions-of-appointment-and-service-of-officers/)
- [Seventh Schedule: Purpose, Authorised person](https://dpdp.myndsolution.com/wiki/rules/schedule-7-purpose-authorised-person/)