The government, on 14th November, notified the long-awaited rules under the Digital Personal Data Protection (DPDP) Act, outlining a phased 18-month rollout for India’s new data protection regime.

A key feature is data localisation. Large data fiduciaries must store certain categories of personal data within India, though cross-border transfers will still be allowed under additional conditions set by the Centre.

Implementation Timeline

Rules for setting up the Data Protection Board take effect immediately. Consent Manager regulations begin in 12 months, while core compliance requirements — including consent notices and operational processes — become mandatory after 18 months.

Consent & Data Rights

Organisations must provide clear notices explaining what data is collected and why, along with an easy option to withdraw consent. Inactive users’ data must be erased after a 48-hour notice.

Data Breaches

Breaches must be promptly disclosed to users, and a detailed report must be filed with the Data Protection Board within 72 hours.

Children’s Data

Collecting children’s data requires verified parental consent, with limited exemptions for healthcare, education and childcare institutions.

High-Impact Data Handlers

Entities managing large volumes of user data must conduct impact assessments, undergo audits, and ensure their algorithms do not infringe on user rights. They must also prevent cross-border transfers of restricted data categories.

Exemptions & Government Powers

Data used for research, archiving and statistical work is exempt. For national security, the government can request personal data and bar entities from informing users.

Industry Reaction

Experts say the rules offer clarity and phased timelines, but note that localisation norms may face pushback from global firms. Organisations are expected to overhaul consent frameworks and strengthen security systems ahead of the 12th May 2027 deadline.

Unicorn Signals leverages advanced AI technology to provide you with powerful market predictions and actionable stock scans. Download the app today and 10x your trading & investing journey!