Section 40, DPDP Act [S10-NC4]
As at 6 September 2026. In force from 13 November 2025 by Notification G.S.R. 843(E): phased commencement of the Digital Personal Data Protection Act, 2023 [N11-6ZG].
40. Power to make rules.—(1) The Central Government may, by notification, and subject to the condition of previous publication, make rules not inconsistent with the provisions of this Act, to carry out the purposes of this Act.
(2) In particular and without prejudice to the generality of the foregoing power, such rules may provide for all or any of the following matters, namely:—
[...]
Defined terms in this text (0)
none
Made under this section, or naming it (1)
Digital Personal Data Protection Rules, 2025 [R10-04F], 13 November 2025, partially commenced. Recital: "Whereas draft of the Digital Personal Data Protection Rules, 2025 were published, as required under sub-section (1) of section 40 of the of the Digital Personal Data Protection Act, 2023 (22 of 2023), vide notification of the Government of India in the Ministry of Electronics and Information Technology vide number G.S.R. 02 (E), dated the 3rd January, 2025 [...] the Central Government hereby makes the following rules, namely:—"
Cited by (0)
none
Not held (0)
none
Duties published under this section (0)
none