ZipLaw
DPDP Rules Chapter I
The Digital Personal Data Protection Rules, 2025

Chapter I Rules

Rules
23 · rules 1 to 23
  1. R1 Short title and commencement
  2. R2 Definitions
  3. R3 Notice given by Data Fiduciary to Data Principal
  4. R4 Registration and obligations of Consent Manager
  5. R5 Processing of personal data for provision or issue of subsidy, benefit, service, certificate, licence or permit by State and its instrumentalities
  6. R6 Reasonable security safeguards
  7. R7 Intimation of personal data breach
  8. R8 Time period for specified purpose to be deemed as no longer being served
  9. R9 Contact information of person to answer questions about processing
  10. R10 Verifiable consent for processing of personal data of child
  11. R11 Verifiable consent for processing of personal data of person with disability who has lawful guardian
  12. R12 Exemptions from certain obligations applicable to processing of personal data of child
  13. R13 Additional obligations of Significant Data Fiduciary
  14. R14 Rights of Data Principals
  15. R15 Transfer of personal data outside the territory of India
  16. R16 Exemption from Act for research, archiving or statistical purposes
  17. R17 Appointment of Chairperson and other Members
  18. R18 Salary, allowances and other terms and conditions of service of Chairperson and other Members
  19. R19 Procedure for meetings of Board and authentication of its orders, directions and instruments
  20. R20 Functioning of Board as digital office
  21. R21 Terms and conditions of appointment and service of officers and employees of Board
  22. R22 Appeal to Appellate Tribunal
  23. R23 Calling for information from Data Fiduciary or intermediary