HomeSearch

Lenses
Business lenslens
Certifying body lenslens
End user / data subject lenslens
Front-line staff lenslens
Government lenslens
Human rights / privacy advocate lenslens
Policymaker (Government lens)lens
Regulator / enforcer (Government lens)lens
Africa
Egyptplanned
Ghanaplanned
Kenyaplanned
Moroccoplanned
Nigeriaplanned
Rwandaplanned
South Africaplanned
Asia-Pacific
Australiaplanned
Chinadrafting
Hong Kongplanned
Indiaplanned
Indonesiaplanned
Japanplanned
Malaysiaplanned
New Zealandplanned
Philippinesplanned
Singaporeplanned
South Koreaplanned
Thailandplanned
Vietnamplanned
Europe
European Uniondrafting
Switzerlandplanned
Türkiyeplanned
United Kingdomplanned
Latin America
Argentinaplanned
Brazilplanned
Chileplanned
Colombiaplanned
Peruplanned
Uruguayplanned
Middle East
Bahrainplanned
Israelplanned
Qatarplanned
Saudi Arabiaplanned
United Arab Emiratesplanned
North America
Canadaplanned
Mexicoplanned
United States (federal)drafting
United States
Californiadrafting
Coloradoplanned
Connecticutplanned
Delawareplanned
Floridaplanned
Indianaplanned
Iowaplanned
Kentuckyplanned
Marylandplanned
Minnesotaplanned
Montanaplanned
Nebraskaplanned
New Hampshireplanned
New Jerseyplanned
Ohioplanned
Oregonplanned
Rhode Islandplanned
Tennesseeplanned
Texasplanned
Utahplanned
Virginiaplanned
Menu

India

Coverage plannedAlso: DPDP, DPDPA, Bharat, Data Protection Board

VERIFIED 2026-09-17 · REVIEW BY 2027-03-16

Phased commencement under the Digital Personal Data Protection Rules, 2025 (notified 13 November 2025): the consent manager rule applies from 13 November 2026 and the rules on notice, consent, security, breaches and the exercise of rights from 13 May 2027.

Instruments

No instrument recorded for India yet.

Regulator

No regulator with a sourced address is recorded for India yet.

Exercisable rights

Access, correction, erasure and grievance redressal, exercisable once the substantive provisions commence

Through each lens

End user / data subject

What can I actually do about this today, and what does it cost me.

No end user / data subject analysis for India yet.

Business

What does this obligate us to build, and by when.

No business analysis for India yet.

Government

Government is one lens carrying two sub-lenses, each with judicial reviewability analysis.

No government analysis for India yet.

Policymaker

What did the drafters intend, and what did the text achieve.

No policymaker analysis for India yet.

Regulator / enforcer

What can this authority make stick on appeal.

No regulator / enforcer analysis for India yet.

Certifying body

What is the scope of what we are attesting to.

No certifying body analysis for India yet.

Front-line staff

What do I do when this lands on my desk.

No front-line staff analysis for India yet.

Human rights / privacy advocate

Who does this regime fail, and can that be shown.

No human rights / privacy advocate analysis for India yet.

Sources

  1. Digital Personal Data Protection Act, 2023, ss. 11, 12 and 13 · retrieved 2026-09-17 · https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf
  2. Digital Personal Data Protection Rules, 2025 (G.S.R. 846(E)), r. 1(2)-(4) · retrieved 2026-09-17 · https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf