DPDP Rules
G.S.R. 846(E)
The Digital Personal Data Protection Rules, 2025
The bare text of the Digital Personal Data Protection Rules, 2025.
23
Rules
G.S.R. 846(E)
Notification
40
Section
13 Nov 2025
Notified
Made under
23
rules
Default readable text
Opening text
Preamble
MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY NOTIFICATION
New Delhi, the 13th November, 2025
G.S.R. 846(E).––– Whereas draft of the Digital Personal Data Protection Rules, 2025 were published, as required under sub-section (1) of section 40 of the of the Digital Personal Data Protection Act, 2023 (22 of 2023), vide notification of the Government of India in the Ministry of Electronics and Information Technology vide number G.S.R. 02 (E), dated the 3rd January, 2025, in the Gazette of India, Extraordinary, Part II, Section 3, Sub-section (i), dated the 3rd January, 2025, inviting objections and suggestions from all persons likely to be affected thereby, before the expiry of the period of forty-five days from the date on which copies of the Official Gazette containing the said notification were made available to public;
And whereas copies of the said Official Gazette were made available to the public on the 3rd January, 2025;
And whereas objections and suggestions were received from the public in respect of the said draft rules have been considered by the Central Government;
Now, therefore in exercise of powers conferred by sub-sections (1) and (2) of section 40 of the Digital Personal Data Protection Act, 2023 (22 of 2023), the Central Government hereby makes the following rules, namely: —
Chapter I
23 rules
Rules
R. 2 Definitions
R. 3 Notice given by Data Fiduciary to Data Principal
R. 4 Registration and obligations of Consent Manager
R. 5 Processing of personal data for provision or issue of subsidy, benefit, service, certificate, licence or permit by State and its instrumentalities
R. 6 Reasonable security safeguards
R. 7 Intimation of personal data breach
R. 8 Time period for specified purpose to be deemed as no longer being served
R. 9 Contact information of person to answer questions about processing
R. 10 Verifiable consent for processing of personal data of child
R. 11 Verifiable consent for processing of personal data of person with disability who has lawful guardian
R. 12 Exemptions from certain obligations applicable to processing of personal data of child
R. 13 Additional obligations of Significant Data Fiduciary
R. 14 Rights of Data Principals
R. 15 Transfer of personal data outside the territory of India
R. 16 Exemption from Act for research, archiving or statistical purposes
R. 17 Appointment of Chairperson and other Members
R. 18 Salary, allowances and other terms and conditions of service of Chairperson and other Members
R. 19 Procedure for meetings of Board and authentication of its orders, directions and instruments
R. 20 Functioning of Board as digital office
R. 21 Terms and conditions of appointment and service of officers and employees of Board
R. 22 Appeal to Appellate Tribunal
R. 23 Calling for information from Data Fiduciary or intermediary
No matching sections
Try a shorter term like committee, appeal, complaint, employer, or compensation.