Rule 1: Commencement

Ordinary calendar tranche dates, not upload dates.

Regulated Actor: Rulemaker / all actors

Gazette Baseline: Lines 1005–1010

Official Gazette PDF

Subordinate Trigger

Commencement

Applies to: Rulemaker / all actors

Rule Prescriptions

rr1,2,17-21 publication; r4 one year; rr3,5-16,22,23 eighteen months.

Exceptions & Provisos

Read corrigendum replacing publication wording.

Official Gazette Text (Verbatim Rules Publication)

Ministry of Electronics and Information Technology, Digital Personal Data Protection Rules, 2025.

RULE-1

1. Short title and commencement. — (1) These rules may be called the Digital Personal Data Protection Rules, 2025. (2) Rules 1, 2 and 17 to 21 shall come into force on the date of their publication in the Official Gazette. (3) Rule 4 shall come into force one year after the date of publication of this Gazette. (4) Rules 3, 5 to 16, 22 and 23 shall come into force eighteen months after the date of publication of this Gazette.

Mapped Operational Controls (8)

Enterprise obligations in the Control Master Matrix implementing this subordinate rule.

OBL-22 SPEC-Q10-OBL-22

Cross-Border Data Transfer Governance (Rule 15)

Enforces cross-border transfer blacklists, adequacy checks, and contractual transfer terms.

Owner: Architecture / sector Legal Open Workpaper →

OBL-23 SPEC-Q10-OBL-23

Research, Archival & Statistical Exemptions (Rule 16)

Applies research and statistical exemptions without using personal data for individual decisions.

Owner: Legal / activity owner Open Workpaper →

OBL-29 SPEC-Q10-OBL-29

Parental Consent Verification Standards (Rule 10)

Implements verifiable age-token and parent relationship checks in compliance with Rule 10.

Owner: Product / guardian assurance Open Workpaper →

OBL-30 SPEC-Q10-OBL-30

Child-Safe Data Processing Defaults (Rule 11)

Enforces child-safe processing architecture and strict safeguard defaults under Rule 11.

Owner: Product / guardian assurance Open Workpaper →

OBL-31 SPEC-Q10-OBL-31

Fourth Schedule Child Processing Relief (Rule 12)

Applies Fourth Schedule conditional compliance relaxations for qualifying health/education fiduciaries.

Owner: Product / guardian assurance Open Workpaper →

OBL-36 SPEC-Q10-OBL-36

SDF Algorithmic & Assessment Safeguards (Rule 13)

Conducts algorithmic transparency reviews and periodic risk assessments under Rule 13.

Owner: Privacy / accountable sponsor Open Workpaper →

OBL-42 SPEC-Q10-OBL-42

Rights & Grievance Service Channels (Rule 14)

Operates self-service rights fulfillment portals adhering to prescribed timelines under Rule 14.

Owner: Rights operations / Legal Open Workpaper →

OBL-52 SPEC-Q10-OBL-52

Board Digital-by-Design Proceedings (Rules 17–21)

Interfaces with the Board's digital portal for electronic filing, service, and virtual hearings.

Owner: Legal / board secretariat Open Workpaper →

View Complete 102-Provision Register

Next Rule Rule 2