Rule 1, DPDP Rules [S10-NX3]
As at 7 September 2026. In force from 13 November 2025 by G.S.R. 846(E), dated 13 November 2025 [R10-04F].
1. Short title and commencement.—(1) These rules may be called the Digital Personal Data Protection Rules, 2025.
(2) Rules 1, 2 and 17 to 21 shall come into force on the date of their publication in the Official Gazette.
(3) Rule 4 shall come into force one year after the date of publication of this Gazette.
(4) Rules 3, 5 to 16, 22 and 23 shall come into force eighteen months after the date of publication of this Gazette.
Defined terms in this text (5)
data: Section 2, Kerala Police Act, 2011 [S2MVCX] (In this Act, unless the context otherwise requires,—): "data" means a representation of information, facts, concepts, opinions or instructions in a manner suitable for communication, interpretation or processing by human beings or by automated means
data: Section 2, National institute of Information Technology Act, 2014 [S26QZF] (In this Act, unless the context otherwise requires,—): "data" means a representation of information, facts, concepts, opinions or instructions in a manner suitable for communication, interpretation or processing by human beings or by automated means
data: Section 2, Indian Institutes of Information Technology (Public-Private Partnership) Act, 2017 [S27VSY] (In this Act, unless the context otherwise requires,—): "data" means a representation of information, facts, concepts, opinions or instructions in a manner suitable for communication, interpretation or processing by human beings or by automated means
data: 3 more definitions.
month: Section 3, General Clauses Act, 1897 [S100SN] (In this Act, and in all Central Acts and Regulations made after the commencement of this Act, unless there is anything repugnant in the subject or context): "month" shall mean a month reckoned according to the British calendar
personal data: Section 2, Tamil Nadu Prohibition of Online Gambling and Regulation of Online Games Act, 2022 [S2NMB2] (In this Act, unless the context otherwise requires,—): "personal data" means any data about an individual who is identifiable by or in relation to such data
personal data: Section 2, Kerala Police Act, 2011 [S2MVCX] (In this Act, unless the context otherwise requires,—): "personal data" means any data about an individual who is identifiable by or in relation to such data
personal data: Section 2, Indian Institutes of Information Technology (Public-Private Partnership) Act, 2017 [S27VSY] (In this Act, unless the context otherwise requires,—): "personal data" means any data about an individual who is identifiable by or in relation to such data
personal data: 1 more definition.
rule: Section 3, General Clauses Act, 1897 [S100SN] (In this Act, and in all Central Acts and Regulations made after the commencement of this Act, unless there is anything repugnant in the subject or context): (51) "rule" shall mean a rule made in exercise of a power conferred by any enactment, and shall include a Regulation made as a rule under any enactment;
year: Section 3, General Clauses Act, 1897 [S100SN] (In this Act, and in all Central Acts and Regulations made after the commencement of this Act, unless there is anything repugnant in the subject or context): "year" shall mean a year reckoned according to the British calendar
Made under this rule, or naming it (0)
none
Cited by (0)
none
Not held (0)
none
Duties published under this rule (0)
none