On Dec. 17, 2025, IND DP published a corrigendum (included in the official gazette of Dec. 11) which makes minor, technical corrections to the Nov. 2025 rules above.
On Jan. 3, IND GVT drafted digital personal data protection rules.
IND GVT, IND DP issued draft Digital personal data protection rules, 2025 (the rules).
IND DP also published consultation notice as well as explanatory note to the rules.
The rules provide for the necessary details as well as the implementation framework of the Digital personal data protection act 2023 (the act) (#154022).
They cover notice by data fiduciary to data principal; the eligibility, registration and obligations of a consent manager, specifying reasonable security safeguards.
Plus processing for provision or issue of services by the state or its instrumentality.
The rules also stipulate matters on intimation of personal data breach, contact information for addressing data processing queries, duty on significant data fiduciaries.
Verifiable consent for processing personal data of children, persons with disabilities.
Processing of personal data outside India; exemption from the act re research, archiving, or statistical purposes; and appointment of chairperson and other members.
In addition, functioning of the board as a digital office, information request from data fiduciary or intermediary by central government, appeal to appellate tribunal.
Effectiveness
Consultation closes on Feb. 18, 2025.
Feb. 2025 Consultation Extension
On Feb. 14, 2025, IND GVT extended the consultation by 15 days to Mar. 5, 2025.
Nov. 2025 IND DP Published Gazetted Rules
On Nov. 14, 2025, IND DP published the gazettedDigital personal data protection rules, 2025.
Final version contains a number of revisions from Jan. 2025 draft rules, including modifications to consent manager registration requirements, personal data breach notification timelines, data retention periods for specified classes of data fiduciaries.
Document dated Nov. 14, 2025, was received on Nov. 26, 2025 due to a new feed.
Dec. 2025 Corrigendum
On Dec. 17, 2025, IND DP published a corrigendum (included in the official gazette of Dec. 11) which makes minor, technical corrections to the Nov. 2025 rules above.
Regulators
IND DP; IND GVT
Entity Types
Corp; Fiduciary
Reference
PR 12/17/2025; OG 806, G.S.R. 892(E), 12/11/2025; PR 11/14/2025; OG 760, Nt G.S.R. 846(E), 11/13/2025; Nt 2/14/2025; CP, Nt, PR, 1/3/2025;
