---
title: "DPDP timeline: from the privacy judgment to full commencement"
url: https://dpdp.myndsolution.com/wiki/timeline/
description: "Dated timeline of India's DPDP law: the Bill, the Act, draft and final Rules, the Data Protection Board and every commencement date, each with its source."
kind: reference
updated: 2026-09-09
publisher: MYND Integrated Solutions
license: Official Government of India texts are reproduced verbatim (public domain / open government data). Interpretation is CC BY 4.0, MYND Integrated Solutions.
disclaimer: Not legal advice. Official text prevails over any interpretation.
html_version: https://dpdp.myndsolution.com/wiki/timeline/
---
# DPDP timeline: from the privacy judgment to full commencement

- **18 November 2022** — Draft Digital Personal Data Protection Bill, 2022 released for public consultation. MeitY published the draft Digital Personal Data Protection Bill, 2022 for public comment. More than 22,600 comments were received on it, and the Bill introduced in Parliament in 2023 was settled after considering them. [Source](https://www.pib.gov.in/PressReleasePage.aspx?PRID=1881402)
- **3 August 2023** — The Digital Personal Data Protection Bill, 2023 introduced in the Lok Sabha. Bill No. 113 of 2023 was introduced in the Lok Sabha by the Ministry of Electronics and Information Technology. [Source](https://sansad.in/getFile/BillsTexts/LSBillTexts/Asintroduced/113_2023_LS_Eng83202330313PM.pdf?source=legislation)
- **7 August 2023** — Bill passed by the Lok Sabha. The Lok Sabha passed the Digital Personal Data Protection Bill, 2023 on 7 August 2023. The cover of Bill No. 113-C of 2023 records: "AS PASSED BY LOK SABHA ON 7TH AUGUST, 2023". [Source](https://sansad.in/getFile/BillsTexts/LSBillTexts/PassedLoksabha/113-C_2023_LS_Eng882023104157AM.pdf?source=legislation)
- **9 August 2023** — Bill passed by the Rajya Sabha. The Rajya Sabha passed the Bill on 9 August 2023. The cover of Bill No. 113-F of 2023 records: "AS PASSED BY THE HOUSES OF PARLIAMENT — LOK SABHA ON 7TH AUGUST, 2023 / RAJYA SABHA ON 9TH AUGUST, 2023 / ASSENTED TO ON 11TH AUGUST, 2023". [Source](https://sansad.in/getFile/BillsTexts/LSBillTexts/PassedBothHouses/data%20protection818202332045PM.pdf?source=legislation)
- **11 August 2023** — Presidential assent and publication in the Gazette. The Digital Personal Data Protection Act, 2023 (No. 22 of 2023) received the assent of the President on 11 August 2023 and was published the same day in the Gazette of India, Extraordinary, Part II, Section 1, No. 25. [Source](https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf)
- **3 January 2025** — Draft Digital Personal Data Protection Rules, 2025 published for consultation. The draft Rules were published as G.S.R. 02(E) in the Gazette of India, Extraordinary, Part II, Section 3, Sub-section (i), inviting objections and suggestions before the expiry of forty-five days from the date on which copies of the Gazette were made available to the public. Copies were made available on 3 January 2025. [Source](https://www.meity.gov.in/static/uploads/2024/02/4a33a6289884e33bc2124e8280e69ea2.pdf)
- **3 January 2025** — MeitY publishes the explanatory note to the draft Rules. A six-page explanatory note was issued with the draft Rules. Its own footer records that its purpose "is only to make it easier to understand the provisions of the Rules". [Source](https://www.meity.gov.in/static/uploads/2024/02/177897517eb68c21f247bc3247a2f506.pdf)
- **14 February 2025** — Consultation deadline extended to 5 March 2025. MeitY extended the period for comments on the draft Rules from 18 February 2025 to 5 March 2025. [Source](https://www.meity.gov.in/static/uploads/2025/02/0da2ec7e6bbf7d4803d256b9be0fadfb.pdf)
- **26 July 2025** — Consultation closes with 6,915 inputs reported. PIB reported that 6,915 feedback inputs had been received from citizens and stakeholders on the draft Rules. MeitY's own summary of submissions, published in January 2026, gives the figure as 6,951. [Source](https://www.pib.gov.in/PressReleasePage.aspx?PRID=2148944)
- **13 November 2025** — Board fixed at four Members. By G.S.R. 845(E), made under sub-section (1) of section 19, the Central Government notified that the Data Protection Board of India shall consist of four Members. [Source](https://egazette.gov.in/WriteReadData/2025/267649.pdf)
- **13 November 2025** — Commencement of the Act, first phase. By G.S.R. 843(E), sections 1, 2, 18 to 26, 35, 38 to 44 of the Act come into force on this date (date of publication of the notification in the Official Gazette). Where only part of a section is appointed, the section's own commencement entry in the Act records which sub-sections are covered. [Source](https://egazette.gov.in/WriteReadData/2025/267647.pdf)
- **13 November 2025** — Commencement of the Rules, rules 1, 2, 17 to 21. Under rule 1(2) of the Digital Personal Data Protection Rules, 2025, rules 1, 2, 17 to 21 come into force on this date (date of publication in the Official Gazette). [Source](https://egazette.gov.in/WriteReadData/2025/267650.pdf)
- **13 November 2025** — Data Protection Board of India established. By G.S.R. 844(E), made under sub-sections (1) and (3) of section 18, the Central Government established the Data Protection Board of India with effect from the date of publication of the notification. Its head office is to be in the National Capital Region of India. [Source](https://egazette.gov.in/WriteReadData/2025/267648.pdf)
- **13 November 2025** — Digital Personal Data Protection Rules, 2025 notified. The Rules were notified as G.S.R. 846(E) under sub-sections (1) and (2) of section 40 of the Act: 23 rules and 7 Schedules, published in Gazette of India, Extraordinary, Part II, Section 3, Sub-section (i), No. 760. [Source](https://egazette.gov.in/WriteReadData/2025/267650.pdf)
- **10 December 2025** — Corrigenda to the Rules issued. G.S.R. 892(E), dated 10 December 2025 and published on 11 December 2025, makes 8 corrections to the printed text of G.S.R. 846(E) across pages 24, 29, 32, 34 and 38 of the Gazette. Two of them replace "of this Gazette" with "in the Official Gazette" in the commencement sub-rules, and one re-letters the definitions in the Note to the Fourth Schedule from "(a) to (f)" to "(a) to (g)". [Source](https://www.meity.gov.in/static/uploads/2025/12/3c7ebbae0e5456f493f486e6845df86b.pdf)
- **14 January 2026** — MeitY publishes the summary of submissions on the draft Rules. A twelve-page summary records 6,951 comments received through MyGov and the physical consultations held between 14 January 2025 in Delhi and 4 March 2025 in Guwahati, clustered by rule. [Source](https://www.meity.gov.in/static/uploads/2026/01/a49c50414777afc2af0b8d59dafacd60.pdf)
- **27 January 2026** — PIB backgrounder for International Data Privacy Day. A seven-page official overview of the DPDP framework, the most recent found for 2026. [Source](https://static.pib.gov.in/WriteReadData/specificdocs/documents/2026/jan/doc2026127771501.pdf)
- **6 May 2026** — Applications invited for the Chairperson and Members of the Data Protection Board. MeitY circular F. No. 2(1)/2026-Pers.I invites applications for one Chairperson and four Members of the Data Protection Board of India under section 18 of the Act, through the Search-cum-Selection Committee provided for by rule 17 of the Rules. No appointment had been notified as at 9 September 2026. [Source](https://www.meity.gov.in/static/uploads/2026/05/cd481c027470b420b4cb85fb40a91c53.pdf)
- **13 November 2026** — Commencement of the Act, second phase. By G.S.R. 843(E), sections 6, 27 of the Act come into force on this date (one year from the date of publication of the Gazette). Where only part of a section is appointed, the section's own commencement entry in the Act records which sub-sections are covered. [Source](https://egazette.gov.in/WriteReadData/2025/267647.pdf)
- **13 November 2026** — Commencement of the Rules, rule 4. Under rule 1(3) of the Digital Personal Data Protection Rules, 2025, rules 4 come into force on this date (one year after the date of publication). [Source](https://egazette.gov.in/WriteReadData/2025/267650.pdf)
- **13 May 2027** — Commencement of the Act, third phase. By G.S.R. 843(E), sections 3 to 17, 27 to 34, 36, 37, 44 of the Act come into force on this date (eighteen months from the date of publication of the Gazette). Where only part of a section is appointed, the section's own commencement entry in the Act records which sub-sections are covered. [Source](https://egazette.gov.in/WriteReadData/2025/267647.pdf)
- **13 May 2027** — Commencement of the Rules, rules 3, 5 to 16, 22, 23. Under rule 1(4) of the Digital Personal Data Protection Rules, 2025, rules 3, 5 to 16, 22, 23 come into force on this date (eighteen months after the date of publication). [Source](https://egazette.gov.in/WriteReadData/2025/267650.pdf)