/Timeline
DPDP timeline: from the privacy judgment to full commencement
22 dated events, oldest first. Upcoming dates are the commencement phases fixed by notification.
Draft Digital Personal Data Protection Bill, 2022 released for public consultation
MeitY published the draft Digital Personal Data Protection Bill, 2022 for public comment. More than 22,600 comments were received on it, and the Bill introduced in Parliament in 2023 was settled after considering them. Source
The Digital Personal Data Protection Bill, 2023 introduced in the Lok Sabha
Bill No. 113 of 2023 was introduced in the Lok Sabha by the Ministry of Electronics and Information Technology. Source
Bill passed by the Lok Sabha
The Lok Sabha passed the Digital Personal Data Protection Bill, 2023 on 7 August 2023. The cover of Bill No. 113-C of 2023 records: "AS PASSED BY LOK SABHA ON 7TH AUGUST, 2023". Source
Bill passed by the Rajya Sabha
The Rajya Sabha passed the Bill on 9 August 2023. The cover of Bill No. 113-F of 2023 records: "AS PASSED BY THE HOUSES OF PARLIAMENT — LOK SABHA ON 7TH AUGUST, 2023 / RAJYA SABHA ON 9TH AUGUST, 2023 / ASSENTED TO ON 11TH AUGUST, 2023". Source
Presidential assent and publication in the Gazette
The Digital Personal Data Protection Act, 2023 (No. 22 of 2023) received the assent of the President on 11 August 2023 and was published the same day in the Gazette of India, Extraordinary, Part II, Section 1, No. 25. Source
Draft Digital Personal Data Protection Rules, 2025 published for consultation
The draft Rules were published as G.S.R. 02(E) in the Gazette of India, Extraordinary, Part II, Section 3, Sub-section (i), inviting objections and suggestions before the expiry of forty-five days from the date on which copies of the Gazette were made available to the public. Copies were made available on 3 January 2025. Source
MeitY publishes the explanatory note to the draft Rules
A six-page explanatory note was issued with the draft Rules. Its own footer records that its purpose "is only to make it easier to understand the provisions of the Rules". Source
Consultation deadline extended to 5 March 2025
MeitY extended the period for comments on the draft Rules from 18 February 2025 to 5 March 2025. Source
Consultation closes with 6,915 inputs reported
PIB reported that 6,915 feedback inputs had been received from citizens and stakeholders on the draft Rules. MeitY's own summary of submissions, published in January 2026, gives the figure as 6,951. Source
Board fixed at four Members
By G.S.R. 845(E), made under sub-section (1) of section 19, the Central Government notified that the Data Protection Board of India shall consist of four Members. Source
Commencement of the Act, first phase
By G.S.R. 843(E), sections 1, 2, 18 to 26, 35, 38 to 44 of the Act come into force on this date (date of publication of the notification in the Official Gazette). Where only part of a section is appointed, the section's own commencement entry in the Act records which sub-sections are covered. Source
Commencement of the Rules, rules 1, 2, 17 to 21
Under rule 1(2) of the Digital Personal Data Protection Rules, 2025, rules 1, 2, 17 to 21 come into force on this date (date of publication in the Official Gazette). Source
Data Protection Board of India established
By G.S.R. 844(E), made under sub-sections (1) and (3) of section 18, the Central Government established the Data Protection Board of India with effect from the date of publication of the notification. Its head office is to be in the National Capital Region of India. Source
Digital Personal Data Protection Rules, 2025 notified
The Rules were notified as G.S.R. 846(E) under sub-sections (1) and (2) of section 40 of the Act: 23 rules and 7 Schedules, published in Gazette of India, Extraordinary, Part II, Section 3, Sub-section (i), No. 760. Source
Corrigenda to the Rules issued
G.S.R. 892(E), dated 10 December 2025 and published on 11 December 2025, makes 8 corrections to the printed text of G.S.R. 846(E) across pages 24, 29, 32, 34 and 38 of the Gazette. Two of them replace "of this Gazette" with "in the Official Gazette" in the commencement sub-rules, and one re-letters the definitions in the Note to the Fourth Schedule from "(a) to (f)" to "(a) to (g)". Source
MeitY publishes the summary of submissions on the draft Rules
A twelve-page summary records 6,951 comments received through MyGov and the physical consultations held between 14 January 2025 in Delhi and 4 March 2025 in Guwahati, clustered by rule. Source
PIB backgrounder for International Data Privacy Day
A seven-page official overview of the DPDP framework, the most recent found for 2026. Source
Applications invited for the Chairperson and Members of the Data Protection Board
MeitY circular F. No. 2(1)/2026-Pers.I invites applications for one Chairperson and four Members of the Data Protection Board of India under section 18 of the Act, through the Search-cum-Selection Committee provided for by rule 17 of the Rules. No appointment had been notified as at 9 September 2026. Source
Commencement of the Act, second phase
By G.S.R. 843(E), sections 6, 27 of the Act come into force on this date (one year from the date of publication of the Gazette). Where only part of a section is appointed, the section's own commencement entry in the Act records which sub-sections are covered. Source
Commencement of the Rules, rule 4
Under rule 1(3) of the Digital Personal Data Protection Rules, 2025, rules 4 come into force on this date (one year after the date of publication). Source
Commencement of the Act, third phase
By G.S.R. 843(E), sections 3 to 17, 27 to 34, 36, 37, 44 of the Act come into force on this date (eighteen months from the date of publication of the Gazette). Where only part of a section is appointed, the section's own commencement entry in the Act records which sub-sections are covered. Source
Commencement of the Rules, rules 3, 5 to 16, 22, 23
Under rule 1(4) of the Digital Personal Data Protection Rules, 2025, rules 3, 5 to 16, 22, 23 come into force on this date (eighteen months after the date of publication). Source