Reviewed 30 August 2026

Official sources and legal status

The Gazette notifications control provision-level status. The board below keeps in-force and notified future cohorts separate.

Six commencement cohorts

Act and Rules publication does not create one whole-instrument commencement date. Review each cohort before relying on a provision or rule.

in forceDPDP Act, 2023

Sections 1(2), 2, 18–26, 35, 38–43, 44(1) and 44(3).

Effective from 2025-11-13 · gsr-843e

notified future commencementDPDP Act, 2023

Section 6(9) and section 27(1)(d).

Effective from 2026-11-13 · gsr-843e

notified future commencementDPDP Act, 2023

Remaining notified Act provisions, including sections 3–17 and section 10.

Effective from 2027-05-13 · gsr-843e

in forceDPDP Rules, 2025

Rules 1, 2 and 17–21.

Effective from 2025-11-13 · gsr-846e

notified future commencementDPDP Rules, 2025

Rule 4.

Effective from 2026-11-13 · gsr-846e

notified future commencementDPDP Rules, 2025

Rules 3, 5–16, 22 and 23.

Effective from 2027-05-13 · gsr-846e

Official source ledger

Open the primary source and pinpoint rather than relying on a product summary. The PIB record is an official explainer; Gazette text controls provision-level status.

editorial analysisDigital Personal Data Protection Act, 2023 (Act No. 22 of 2023)

Section 1(2); commencement may be appointed separately for different provisions.

Checked 2026-08-30

in forceDPDP Act commencement notification, G.S.R. 843(E)

Paragraphs (a)–(c): publication, one-year and eighteen-month cohorts.

Checked 2026-08-30

in forceDigital Personal Data Protection Rules, 2025, G.S.R. 846(E)

Rule 1(2)–(4): publication, one-year and eighteen-month rule cohorts.

Checked 2026-08-30

in forceCorrigendum to the DPDP Rules, 2025, G.S.R. 892(E)

Corrections to the text of G.S.R. 846(E), including Rule 1 wording.

Checked 2026-08-30

official guidance or explainerPIB status update on phased implementation

Status paragraph describing an eighteen-month phased implementation timeline.

Checked 2026-08-30