- Home
- Blog
Blog
TruePrivacy DPDP blog
Explainers on the DPDP Act, 2023 and the DPDP Rules, 2025, written from the Gazette text. Each post opens with a short answer and lists its sources.
Short answer
This blog explains India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 (G.S.R. 846(E)), with each claim tied to a section or rule. Rule 4 Consent Manager registration starts on 13 November 2026, and core obligations begin on 13 May 2027. Each post carries its publication date and its sources.
Posts
DPDP Consent Manager registration starts 13 Nov 2026
Rule 4 Consent Manager registration starts on 13 Nov 2026. Conditions include ₹2 crore net worth; the application form is not published yet.
TimelineGetting ready for 13 May 2027
What Indian companies should finish before core DPDP obligations begin on 13 May 2027, with a month-by-month plan from November 2026.
Rule 7Understanding DPDP Rule 7 breach duties
Intimation without delay plus a detailed report to the Board within 72 hours: practical Rule 7 steps for Indian incident response teams.
Section 10Significant Data Fiduciary duties in practice
Significant Data Fiduciary duties under s.10 and Rule 13: an India-based DPO, an independent data auditor, and a yearly DPIA and data audit.
IndustryDPDP priorities for fintech and NBFCs
DPDP priorities for fintech and NBFCs: onboarding notices and consent, processors, breach readiness, retention and governance before 13 May 2027.
S.O. 5458(E)What the Removal of Difficulties Order actually does
S.O. 5458(E), Gazette 6 Oct 2026, is editorial only: it inserts 'of' in s.9(1) and changes 'audit' to 'data audit' in s.10(2)(c)(ii).
GazetteDPDP Rules notification: what changed
The DPDP Rules, 2025 are G.S.R. 846(E) of 13 Nov 2025; G.S.R. 843(E) is the commencement notification. Dates, corrigendum and what to read next.
How we write these posts
- We start from the Gazette text of the Act, the Rules and the orders made under them.
- We cite the section or rule next to each claim, such as s.6 or Rule 7.
- We do not invent Board orders, fines or cases. As of 4 November 2026, no Board members have been appointed.
- For the law itself, see the DPDP Act hub and the timeline.
Where do the facts in these posts come from?
From the Gazette of India text of the DPDP Act, 2023, the DPDP Rules, 2025 (G.S.R. 846(E)) and related notifications, and the Press Information Bureau release of 14 November 2025.
Are these posts legal advice?
No. They are educational information. Check how the law applies to you with counsel.
When do DPDP core obligations begin?
On 13 May 2027, when Rules 3, 5 to 16, 22 and 23 come into force (Rule 1).
Your DPDP plan, starting today
Core obligations for data fiduciaries begin on 13 May 2027.
Core obligations begin