The 3rd and main DPDP commencement date is computed as 13 May 2027, which is interpretation until officially confirmed. What is in force today
Sources last verified on 28 October 2026. Methodology
Category
4 articles on this site are filed here. Open any of them for the source documents behind their legal claims, with a claim type label on every source.
Breach response
28 अक्टूबर 2026 की स्थिति में CERT In की 6 घंटे की duty named entities और Annexure I incidents पर लागू है; DPDP Rule 7 अभी लागू नहीं है। Official Hindi Gazette और Board को सूचना देने के 2 चरण समझें।
Breach response
Rule 7 of the DPDP Rules 2025 is not in force, and when it commences 2 clocks start the moment your organisation becomes aware of a personal data breach. Computed commencement is 13 May 2027, interpretation until officially confirmed. Contain and anchor the clock while running the 2 Rule 7 duties in parallel, file the 72 hour Board submission, then stabilise.
Breach response
India runs 2 breach clocks and only 1 is in force today: CERT In, 6 hours. DPDP Rule 7, computed to commence 13 May 2027, interpretation until officially confirmed, gives 72 hours for the detailed Board submission, or longer if the Board allows on a written request; from then, one organisation can be on both. Who reports what, to whom, on which clock.
Breach response
DPDP Rule 7, not in force yet, starts 2 clocks on awareness of a breach: intimation without delay, then detailed information to the Board within 72 hours. Computed commencement is 13 May 2027, interpretation until officially confirmed, and the intimation goes to each affected Data Principal and to the Board.
Each page carries the official text of the provision, its commencement status and the sources behind it.
Free, no login, and each one shows the provisions its answers rest on.
