India · Legislation
India DPDPA Rules 2025 has been enacted.
Finalized by MeitY on November 13, 2025, these rules operationalize the Digital Personal Data Protection Act, 2023, establishing consent-centric data fiduciary obligations, breach notification requirements, and the Data Protection Board of India as an enforcement authority. AI systems processing personal data face phased compliance obligations — including data minimization, impact assessments for Significant Data Fiduciaries, and explicit consent requirements — rolling out fully by May 2027.
Digital Personal Data Protection Rules, 2025
Topics this bill touches, used to group it with related legislation.
Read the bill text and legislative history at the source.
Put this record in front of EcoGPT and ask follow-up questions.
What would India DPDPA Rules 2025 require of companies that handle personal data?