Last Update: 04/05/2026 at 1:25 PM EST
India Tightens DPDPA Compliance Timeline
Coverage from JD Supra, The Week, and others
Articles
9
Latest Article
05/13
Active Days
31
Executive Summary
India's privacy rules set phased DPDPA compliance deadlines, breach reporting, and consent duties, forcing firms to prepare for enforcement by 2027
- India's DPDPA rules turn the 2023 law into operational compliance requirements
- Administrative provisions begin on November 13 2025, with full obligations on May 13 2027
- The regime requires consent-based processing, itemized recipient disclosures, and documented vendor contracts
- Data fiduciaries remain responsible for processor conduct and must use security safeguards and due diligence
- Breach reporting is mandatory within 72 hours, along with grievance handling and recordkeeping
- The Data Protection Board of India will enforce the rules and can impose large penalties
- MeitY proposed shortening the compliance window to 12 months and asked for feedback by March 2026
Quick Facts
- What: DPDPA rules and an accelerated compliance timeline
- Where: India
- Why: To operationalize privacy law and enforce stronger data protection standards
- Who: India's Ministry of Electronics and IT and regulated businesses
- When: Administrative rules start in 2025 and full compliance in 2027
Coverage Timeline: 31 Days
Featured Article
Data fiduciaries and regulators in India prepare for DPDP Act compliance ahead of May 2027 enforcement.
Additional Articles
⭐⭐⭐⭐⭐
Data Fiduciaries and Data Processors in India must meet DPDP Act obligations from November 2025 through May 2027.
India regulators publish DPDPA rules detailing consent based processing and breach obligations in India
India implements DPDP Rules 2025 in 2026 with a grace period through May 2027 to govern privacy nationwide.
US privacy enforcement tightens as COPPA deadlines and state rules press Indian and domestic firms to strengthen data practices.
⭐⭐⭐
MeitY reviews DPDP Act compliance timelines in India as privacy experts warn of misread milestones and data mapping requirements.
Jules Polonetsky discusses India's DPDP Act enforcement timeline at the India AI Impact Summit 2026.
India enforces DPDP Act 2023 establishing lawful purpose and seven security pillars nationwide in 2023.
⭐️⭐️
MeitY shortened India DPDP Rules compliance to 12 months, requesting stakeholder feedback by March 2026 amid concerns about uneven sector readiness before the November 2026 deadline.