Countdown to Compliance: India's Data Protection Law Takes Effect
Updated: Sep 16
India's data protection law is no longer theoretical. It's running on a clock.
Our founding partners opens the firm's DPDP Series.
The DPDP Act, 2023 was assented to nearly three years ago. The Rules were notified in November 2025. Full enforcement lands on 13 May 2027.
That gap doesn't mean businesses get a pause. Consent, breach reporting, retention limits, and rights fulfilment all become legally binding whether or not the forum is staffed by then.
Swipe through to see what the Act actually covers, how it compares to the GDPR, where it came from (starting with the Puttaswamy judgment in 2017), and the six things every data fiduciary needs to have in place before May 2027.
This is the first post in our DPDP series. More coming soon on consent & notice, breach response, significant data fiduciaries, and cross-border transfers.
Comments