Digital Personal Data Protection Rules, 2025

The Rules, rule by rule

Twenty-three rules and seven schedules, each on its own page with the gazette text as printed and the date it applies from. 30 provisions.

Rules

  1. Rule 1Short title and commencementIn force since 13 November 2025
  2. Rule 2DefinitionsIn force since 13 November 2025
  3. Rule 3Notice given by Data Fiduciary to Data PrincipalApplies from 13 May 2027
  4. Rule 4Registration and obligations of Consent ManagerApplies from 13 November 2026
  5. Rule 5Processing of personal data for provision or issue of subsidy, benefit, service, certificate, licence or permit by State and its instrumentalitiesApplies from 13 May 2027
  6. Rule 6Reasonable security safeguardsApplies from 13 May 2027
  7. Rule 7Intimation of personal data breachApplies from 13 May 2027
  8. Rule 8Time period for specified purpose to be deemed as no longer being servedApplies from 13 May 2027
  9. Rule 9Contact information of person to answer questions about processingApplies from 13 May 2027
  10. Rule 10Verifiable consent for processing of personal data of childApplies from 13 May 2027
  11. Rule 11Verifiable consent for processing of personal data of person with disability who has lawful guardianApplies from 13 May 2027
  12. Rule 12Exemptions from certain obligations applicable to processing of personal data of childApplies from 13 May 2027
  13. Rule 13Additional obligations of Significant Data FiduciaryApplies from 13 May 2027
  14. Rule 14Rights of Data PrincipalsApplies from 13 May 2027
  15. Rule 15Transfer of personal data outside the territory of IndiaApplies from 13 May 2027
  16. Rule 16Exemption from Act for research, archiving or statistical purposesApplies from 13 May 2027
  17. Rule 17Appointment of Chairperson and other MembersIn force since 13 November 2025
  18. Rule 18Salary, allowances and other terms and conditions of service of Chairperson and other MembersIn force since 13 November 2025
  19. Rule 19Procedure for meetings of Board and authentication of its orders, directions and instrumentsIn force since 13 November 2025
  20. Rule 20Functioning of Board as digital officeIn force since 13 November 2025
  21. Rule 21Terms and conditions of appointment and service of officers and employees of BoardIn force since 13 November 2025
  22. Rule 22Appeal to Appellate TribunalApplies from 13 May 2027
  23. Rule 23Calling for information from Data Fiduciary or intermediaryApplies from 13 May 2027

Schedules

  1. First ScheduleFirst Schedule (see rule 4)Applies from 13 November 2026
  2. Second ScheduleSecond Schedule (see rules 5(1) and 16)Applies from 13 May 2027
  3. Third ScheduleThird Schedule (see rule 8(1))Applies from 13 May 2027
  4. Fourth ScheduleFourth Schedule (see rule 12)Applies from 13 May 2027
  5. Fifth ScheduleFifth Schedule (see rule 18)In force since 13 November 2025
  6. Sixth ScheduleSixth Schedule (see rule 21(2))In force since 13 November 2025
  7. Seventh ScheduleSeventh Schedule (see rule 23(1) and 8(3))Applies from 13 May 2027