# India notifies the Digital Personal Data Protection Rules, 2025

- **Record type**: Change log entry
- **Occurred on**: 2025-11-13
- **Jurisdiction**: India
- **Instrument**: Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025
- **Impact level**: Urgent
- **Status after the change**: Partially applicable

## What changed

The DPDP Rules were notified with phased commencement, starting the countdown for consent, notice, security and breach-notification obligations under the DPDP Act 2023.

## What it means in practice

Organisations using personal data of Indian residents in AI should plan compliance against the phased dates.

## Provenance

- **Record page**: https://aipolicytracker.org/changes/2025-11-13-india-dpdp-rules-notified
- **Official source**: https://www.meity.gov.in/data-protection-framework
- **Source document**: Digital Personal Data Protection Rules, 2025
- **Published by**: Ministry of Electronics and Information Technology
- **Review status**: pending review
- **Confidence**: medium
- **Facts last confirmed**: never confirmed against the official source
- **Retrieved**: 2026-09-24
- **Licence**: https://creativecommons.org/licenses/by/4.0/

> This record is a structured summary with a link to the official text. It is not legal advice. Open the official source before relying on any date or duty. How current each record type must be is published at https://aipolicytracker.org/verification; what a record must carry at all is published at https://aipolicytracker.org/coverage.