Skip to main content
See every side of every news story
Published loading...Updated

After two years, India’s data privacy law comes to force

  • On November 14, 2025, the Ministry of Electronics and Information Technology notified the Digital Personal Data Protection Rules, 2025, operationalising the DPDP Act and starting compliance timelines.
  • After months of consultation, MeitY finalised the DPDP Rules following Parliament's August 2023 passage of the Digital Personal Data Protection Act, 2023 and draft rules circulated in January 2025.
  • Platforms must now comply with clearer notice and consent rules, including verifiable consent, strict data retention limits, and mandatory breach reporting to users and the Data Protection Board of India.
  • The Data Protection Board of India will be headquartered in the National Capital Region and have four members, with powers to investigate breaches and companies must start aligning systems with the new rules.
  • A phased schedule makes core duties immediate while data fiduciaries face staggered deadlines including DPO disclosures by November 2026, Consent Manager rules next year, and full enforcement for large tech by May 2027.
Insights by Ground AI

22 Articles

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 45% of the sources lean Left, 44% of the sources lean Right
45% Left

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

Times of India broke the news in India on Friday, November 14, 2025.
Too Big Arrow Icon
Sources are mostly out of (0)

Similar News Topics

News
Feed Dots Icon
For You
Search Icon
Search
Blindspot LogoBlindspotLocal