Implementation guide
The DPDP timeline
India’s data protection framework is phased. Follow the journey from the Act’s assent to the point when the main operational duties begin.
Planning view: The dates below are commencement milestones, not a substitute for checking the latest government notification, Rules, or sector-specific requirements.
A phased journey
01
Phase 1 of 4
Foundation
The Act receives assent
The Digital Personal Data Protection Act, 2023 receives assent. The framework exists, but provisions will commence through later government notifications.
Make this actionable
Use the remaining runway to map data, review notices and consent, test rights workflows, and prepare breach response evidence.
Browse the chaptersPrimary sources
See the official commencement notification and the notified Rules published by MeitY.
General information only; this page is not legal advice. Dates are calculated from the official notifications’ one-year and eighteen-month periods.