Status snapshot · 30 August 2026
Official source register
Primary Indian government sources anchor legal-status labels; explainers never override Gazette text.
Phased commencement matters
The DPDP Act, 2023 is enacted law, while the 13 November 2025 commencement notification assigns provisions to publication-date, one-year and eighteen-month cohorts. The DPDP Rules, 2025 use corresponding phased dates. Many substantive operational provisions relevant to this questionnaire are notified for 13 May 2027. This is a status summary, not an applicability conclusion.
official-sources.2026-08-30
Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023)
Ministry of Law and Justice, Gazette of India
Section 1(2); operative dates depend on G.S.R. 843(E).
Open official source ↗G.S.R. 843(E) — commencement notification under the DPDP Act
MeitY, Gazette of India
Paragraphs (a), (b) and (c), published 13 November 2025.
Open official source ↗G.S.R. 846(E) — Digital Personal Data Protection Rules, 2025
MeitY, Gazette of India
Rule 1(2)–(4), published 13 November 2025.
Open official source ↗Final Rules and corrigendum register
Ministry of Electronics and Information Technology
Corrigendum listed 16 December 2025.
Open official source ↗How status is used
Each topic cites an Act or Rules reference and keeps applicability fact-dependent. A future notified commencement date is not described as a currently operative obligation. The source version and review date travel with JSON and text exports.