Enforcement Timeline
From enactment to full enforcement
Every key DPDPA milestone — from Presidential assent in August 2023 to the phased implementation of the DPDP Rules, 2025.
- Completed
DPDPA receives Presidential assent
The Digital Personal Data Protection Act, 2023 is published in the Official Gazette.
- Completed
Draft DPDP Rules, 2025 released
MeitY releases the draft DPDP Rules for public consultation.
- Completed
Data Protection Board established
The Data Protection Board of India is legally established under Section 18 of the DPDP Act, with its headquarters in the National Capital Region. The Board will consist of a Chairperson and four Members; the selection process for these appointments has been initiated by MeitY.
- In Force
DPDP Rules, 2025 notified
The DPDP Rules are officially notified and published by MeitY.
- Upcoming
Consent Manager rules effective
Rules on Consent Manager registration and operations come into effect (Rules + 12 months). ~6 months away.
- Upcoming
Full enforcement of remaining obligations
All remaining obligations under the DPDP Rules come into effect (Rules + 18 months).
- Upcoming
Significant Data Fiduciaries notified
Central Government notifies the first set of Significant Data Fiduciaries.
- Upcoming
Restricted countries list published
MeitY publishes the list of countries to which cross-border data transfers are restricted.
- In Progress
Data Protection Board fully staffed
The Data Protection Board of India becomes fully operational as a digital-first tribunal with complete membership.