DPDP Rules
G.S.R. 846(E)
The Digital Personal Data Protection Rules, 2025
The bare text of the Digital Personal Data Protection Rules, 2025.
23
Rules
G.S.R. 846(E)
Notification
40
Section
13 Nov 2025
Notified
Made under
23
rules
Default readable text
Opening text
Preamble
MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY NOTIFICATION
New Delhi, the 13th November, 2025
G.S.R. 846(E).––– Whereas draft of the Digital Personal Data Protection Rules, 2025 were published, as required under sub-section (1) of section 40 of the of the Digital Personal Data Protection Act, 2023 (22 of 2023), vide notification of the Government of India in the Ministry of Electronics and Information Technology vide number G.S.R. 02 (E), dated the 3rd January, 2025, in the Gazette of India, Extraordinary, Part II, Section 3, Sub-section (i), dated the 3rd January, 2025, inviting objections and suggestions from all persons likely to be affected thereby, before the expiry of the period of forty-five days from the date on which copies of the Official Gazette containing the said notification were made available to public;
And whereas copies of the said Official Gazette were made available to the public on the 3rd January, 2025;
And whereas objections and suggestions were received from the public in respect of the said draft rules have been considered by the Central Government;
Now, therefore in exercise of powers conferred by sub-sections (1) and (2) of section 40 of the Digital Personal Data Protection Act, 2023 (22 of 2023), the Central Government hereby makes the following rules, namely: —
Chapter I
23 rules
Rules
R2 Definitions
R3 Notice given by Data Fiduciary to Data Principal
R4 Registration and obligations of Consent Manager
R5 Processing of personal data for provision or issue of subsidy, benefit, service, certificate, licence or permit by State and its instrumentalities
R6 Reasonable security safeguards
R7 Intimation of personal data breach
R8 Time period for specified purpose to be deemed as no longer being served
R9 Contact information of person to answer questions about processing
R10 Verifiable consent for processing of personal data of child
R11 Verifiable consent for processing of personal data of person with disability who has lawful guardian
R12 Exemptions from certain obligations applicable to processing of personal data of child
R13 Additional obligations of Significant Data Fiduciary
R14 Rights of Data Principals
R15 Transfer of personal data outside the territory of India
R16 Exemption from Act for research, archiving or statistical purposes
R17 Appointment of Chairperson and other Members
R18 Salary, allowances and other terms and conditions of service of Chairperson and other Members
R19 Procedure for meetings of Board and authentication of its orders, directions and instruments
R20 Functioning of Board as digital office
R21 Terms and conditions of appointment and service of officers and employees of Board
R22 Appeal to Appellate Tribunal
R23 Calling for information from Data Fiduciary or intermediary
No matching sections
Try a shorter term like committee, appeal, complaint, employer, or compensation.