DPDP Rules 2025

Polity & Governance glossary

Also called: Digital Personal Data Protection Rules 2025 · Topic: Transparency, Accountability and e-Governance · NCERT: Beyond NCERT

Meaning

The Digital Personal Data Protection Rules 2025 are the detailed rules that put the DPDP Act 2023 into practice. They were notified on 13-14 November 2025. They come into force in phases over 18 months:

  • the Data Protection Board provisions applied at once;
  • the consent-manager rules apply after 12 months;
  • most duties of data fiduciaries apply after 18 months, around May 2027.

The phases matter because companies and government bodies get time to change their systems before full compliance is due.

Example

The Data Protection Board could start work as soon as the Rules were notified in November 2025. Consent managers can register from November 2026. Full compliance by data fiduciaries is due around May 2027.

Don't confuse with

  • DPDP Act 2023: this is the parent law passed by Parliament, which got assent on 11 August 2023. The Rules are made by the government under that Act to carry it out.

Related concepts

Read more