The much-anticipated draft rules under the DPDP Act were released on Friday, opening the policy to public comments till Feb. 18. (Photo source: Pixabay) Show Quick Read Summary is AI Generated. Newsroom Reviewed

The government on Friday formally notified the long-awaited Digital Personal Data Protection (DPDP) Rules, kicking off a staggered rollout of India’s new privacy regime. While several provisions come into effect immediately, others will be phased in over 12 and 18 months to give industry time to transition.

A key feature is the creation of a four-member Data Protection Board of India, which will oversee compliance, adjudicate breaches, and issue orders. The rules mandate strict breach reporting timelines: all data fiduciaries must inform the Board within 72 hours of any pe

See Full Page