Skip to main content

The 3rd and main DPDP commencement date is computed as 13 May 2027, which is interpretation until officially confirmed.

Sources last verified on 9 October 2026. Methodology

Is the DPDP deadline 13 or 14 May 2027? Why sources disagree by 1 day

Current status

By · Primary sources verified by dpdprules.orgPublished · Last reviewed 15 min read

Are the DPDP compliance deadlines 13 or 14 May 2027?

The short answer

Both dates circulate because the notification date itself is recorded 2 ways. The masthead of Gazette issue No. 760 is printed 13 November 2025, while the eGazette file code stamped on that same issue, CG-DL-E-14112025-267650, and a Press Information Bureau release of 17 November 2025 state 14 November 2025. PIB then published 13 November 2025 for both the Act and the Rules on 3 December 2025, so the Government has stated both dates and cannot be cited in the singular for either. The Rules and the commencement notification set periods, not calendar dates: 1 year and 18 months from publication. Rule 1(3) and Rule 1(4), as corrected by corrigenda G.S.R. 892(E), run from the date of publication in the Official Gazette. So the main compliance date computes to 13 May 2027 from the printed date and 14 May 2027 from the file code. MeitY's own document library dates its copies of those instruments 14 November 2025 as well, but the same index dates the Act's 2023 Gazette print to its masthead on an identical 1 day split, and dates the December corrigenda to 16 December 2025, a day that instrument does not carry anywhere, so on our reading it is not a consistent record of any of a document's own dates. This site computes from the printed Gazette date and treats every computed date as interpretation until officially confirmed. Plan to the earlier date, because a 1 day ambiguity is not a reason to file late.

More answered questions →

Diagram: Why the DPDP deadline is quoted as 13 or 14 May 2027. The same diagram appears further down this article, where it is described in full.

Search for the DPDP compliance deadline and you will find 2 answers. Some sources say 13 May 2027. Others say 14 May 2027. The same split runs through the earlier deadline: 13 or 14 November 2026 for Consent Manager registration.

Neither camp is inventing anything. The disagreement traces to a genuine ambiguity in how the notification date itself is recorded, and once you see it, the whole thing becomes simple to reason about.

Why the DPDP deadline is quoted as 13 or 14 May 2027. Rule 1 sets periods that run from publication rather than calendar dates, so the deadline depends on which record of the publication date you read. The column for 13 November 2025, the date the instrument states for itself and the basis this site uses, holds 3 records: the masthead of Gazette issue No. 760 and the heading of G.S.R. 846(E), which are printed with that date; corrigenda G.S.R. 892(E), an official instrument published in December 2025, whose recital describes that notification twice as dated the 13th November, 2025; and a Press Information Bureau release of 3 December 2025, PRID 2198217, summarising a reply in the Lok Sabha, which states that the Act and the Rules "have been notified on 13 November 2025". The column for 14 November 2025 holds 3 records: the eGazette file code CG-DL-E-14112025-267650 stamped on that same issue, and CG-DL-E-14112025-267647 on the companion Act notification, issue No. 757; the eGazette portal's own listing for issue No. 757, read on 17 August 2026, which gives 14 November 2025 as the issue and publish date and whose search is a browser session form that cannot be rechecked automatically; and a Press Information Bureau release of 17 November 2025, from the same office, stating that the Government of India "notified the Digital Personal Data Protection (DPDP) Rules, 2025 on 14 November 2025". 2 further pieces of evidence were measured on 1 September 2026, across 9 MeitY library entries over 7 documents, and neither of them decides the question. MeitY's document library republishes byte identical copies of Gazette issues No. 757 to No. 760 and dates all 4 of them 14 November 2025, but its date follows the masthead on the Act's own Gazette print and neither date on the corrigenda, so on our reading it is not a consistent record of any document's date and this page does not compute from it. Every one of those 9 entries also states inside its file when it was produced, and on all 8 whose masthead and file code differ that stamp falls on the file code date, which reads both as the making of the electronic file, favouring the printed date, and as that making being the electronic publication itself, favouring the later one. Running the same periods from each record: Rule 1(3), 1 year, Consent Manager registration, lands on 13 November 2026 or 14 November 2026; Rule 1(4), 18 months, the main operational duties, lands on 13 May 2027 or 14 May 2027. This site computes from the printed Gazette date, every computed calendar date is interpretation until officially confirmed, and the practical advice is to plan to the earlier date.

The Rules never state a calendar date

This is the fact that most explainers skip. Rule 1 of the DPDP Rules 2025 does not say "these obligations begin on 13 May 2027". It sets periods that run from publication:

DPDP Rules 2025, r. 1, (2) · Short title and commencement · verbatim

"Rules 1, 2 and 17 to 21 shall come into force on the date of their publication in the Official Gazette."

Sub rule (4), which carries the main operational duties, is printed differently and is quoted here inline rather than as an official requirement, because the closing words shown are the ones a corrigendum has since replaced: "Rules 3, 5 to 16, 22 and 23 shall come into force eighteen months after the date of publication of this Gazette." The operative reading is on Rule 1.

Corrigenda G.S.R. 892(E) of 10 December 2025 corrected the closing words of Rule 1(3) and Rule 1(4) to read "in the Official Gazette", so that is the operative wording today. The periods, 1 year and 18 months, were not touched, and no computed date moves. Those are 2 of the 8 corrections that corrigenda made, and its recital is itself a Government record of the notification date, describing G.S.R. 846(E) as "dated the 13th November, 2025".

The Act side commencement notification, G.S.R. 843(E), is drafted the same way, using "one year from the date of publication of this gazette" for the group containing section 6(9) and section 27(1)(d). No corrigendum on file amends that notification, so the Act side still reads "of this gazette" where Rule 1 now reads "in the Official Gazette".

So every calendar date you have ever seen for DPDP compliance is a computation, not a quotation. The computation needs an input the text does not supply: the date of publication. It also needs a convention for counting a period from that date, which the text does not state either. The publication date is where the 2 answers in circulation come from.

The publication date is recorded 2 ways

RecordWhat it saysWhat it computes to
Printed masthead of Gazette issue No. 76013 November 202513 November 2026 and 13 May 2027
eGazette file code printed on issue No. 760 itself, CG-DL-E-14112025-267650, and on the companion Act notification issue No. 757, CG-DL-E-14112025-26764714 November 202514 November 2026 and 14 May 2027
The eGazette portal's own listing for the companion Act notification, issue No. 757, as read on 17 August 202614 November 2025 as the issue and publish date14 November 2026 and 14 May 2027
MeitY's own document library, which republishes byte identical copies of Gazette issues No. 757, No. 758, No. 759 and No. 76014 November 2025 against all 414 November 2026 and 14 May 2027, subject to the next section, which tests this entry and finds it will not bear the weight
Press Information Bureau release of 17 November 2025"notified the Digital Personal Data Protection (DPDP) Rules, 2025 on 14 November 2025"14 November 2026 and 14 May 2027
Press Information Bureau release of 3 December 2025, PRID 2198217, summarising a reply in the Lok Sabha"The Digital Personal Data Protection Act, 2023 (DPDP Act), and the Digital Personal Data Protection Rules, 2025 have been notified on 13 November 2025"13 November 2026 and 13 May 2027

The 2 Press Information Bureau rows matter most, because they are the same office giving different dates 16 days apart. The 14 May 2027 figure is not a blogger's arithmetic error: it follows the Government's own published statement of 17 November 2025, and anyone who gives you 14 May 2027 is computing from a date the Government itself announced. But the later release, of 3 December 2025, summarising a reply given in the Lok Sabha, puts the Act and the Rules together on 13 November 2025. So "the Government's own date" is not one thing, and this cannot be settled by citing PIB against the masthead.

Equally, the date the instrument states for itself is 13 November 2025: it is on the masthead of issue No. 760, in the heading of G.S.R. 846(E), and repeated in the December 2025 corrigenda, which describe that notification as dated the 13th November, 2025. That is the date this site computes from, and it is why our pages say 13 May 2027.

MeitY's own library, and what its date is worth

There is a fourth record of the publication date, and it needs testing rather than citing. MeitY runs a document library of its own, separately from the eGazette portal, and it dates its copies of the November 2025 instruments 14 November 2025.

Taken at face value that is a second government host on the later date. The copies are not summaries or reprints, so the question is a fair one. On 1 September 2026 we downloaded every DPDP Gazette instrument in MeitY's library, at every entry that lists one on its own, and hashed each file against the copy this site already held. That is 9 entries over 7 documents: the Act's own Gazette print of August 2023, the draft Rules of January 2025, the 4 November 2025 instruments in Gazette issues No. 757 to No. 760, and the December corrigenda. Issue No. 758 and issue No. 806 each appear under 2 entry numbers, which is why 9 entries cover 7 documents. The only entry left out is a wrapper listing 5 files that are each measured individually.

All 9 matched byte for byte, so the ministry is serving the same files and its dates describe the same documents. 7 of those comparisons are against a copy obtained from the eGazette portal, which independently confirms that MeitY is serving the Gazette's own file. The other 2, the Act print and the draft Rules, are held from the same MeitY address the check re fetches, because no eGazette copy of either is on file: there, byte identity shows only that the file has not been replaced since we archived it.

Then look at what those dates do across the whole set. The Masthead date column below holds the date each masthead carries, written in this site's style rather than reproduced: every masthead in this set prints its date in the Gazette's bilingual format, Hindi then English, with the Saka date beside the Gregorian one. The eGazette file code column is the same kind of rendering, of the 8 digits inside the CG code printed on the issue itself.

MeitY's entryMasthead dateeGazette file codeMeitY's date follows
The Act's own Gazette print, issue No. 2511 August 202312 August 2023the masthead
The draft Rules, issue No. 023 January 20253 January 2025both, since there is no split to resolve
The 4 November instruments, issues No. 757 to No. 76013 November 202514 November 2025the file code
The corrigenda, issue No. 80611 December 202512 December 2025neither. MeitY's index says 16 December 2025 and its posting date says 17 December, and the instrument's own notification heading says 10 December

The first row is the one that matters, because it is the identical problem. The Act's Gazette print carries a masthead of 11 August 2023 and a file code embedding 12082023: exactly the 1 day split the November issues have. MeitY's catalogue records 11 August, the masthead. On the November issues the same catalogue records the file code date instead. On the corrigenda it records a date the instrument does not carry anywhere, and 2 of MeitY's own fields disagree with each other about which one that is, 16 December against 17 December.

There is an obvious objection to reading that as inconsistency, and it deserves an answer rather than silence. MeitY stores its document date in 2 different places depending on how an entry is filed, and the 2 rows whose date lands on the masthead are filed the same way, so the table could be comparing 2 fields that are each perfectly consistent in themselves. It is not. The corrigenda are filed both ways, and the copy filed in the same place as those 2 masthead rows carries 16 December 2025, which is neither the masthead nor the file code. So one field on its own gives the masthead on 1 document, both dates on a document that has no split, and neither on a third. The archived comparison prints the field name beside every row, so nobody has to take that from us.

MeitY's date is therefore not a consistent record of any of a document's own dates, and it cannot be cited as a government statement of a publication date, for 14 November or for 13 November. Our first reading of it was that it records when the ministry handled the file, and the draft Rules row refutes that too: MeitY posted them on 21 February 2025 from a February upload path and dated them 3 January 2025, the day they were printed. We do not know what the date records, MeitY publishes no note explaining it, and this page does not compute from it.

The same measurement turns up a fourth date, and it is worth reporting even though it decides nothing. Every one of these files states inside itself when it was produced. On all 8 whose masthead and file code differ, that production stamp falls on the file code date rather than the masthead: the corrigenda file produced on 12 December 2025 against a code embedding 12122025, the Rules file on 14 November 2025 against 14112025, the Act print on 12 August 2023 against 12082023. The 9th entry, the draft Rules, has no split at all and all 3 dates fall on the same day.

That pattern is consistent with the file code recording when the electronic file was made, which would favour the printed date. It is equally consistent with the making of the file being the electronic publication itself, which would favour the later one. It is real and it does not choose between those 2 readings, so we report it and do not lean on it. No official source on file says what the code records, and the 1 day question stays labelled interpretation until officially confirmed.

None of this is a claim you have to take from us. node scripts/meity-mirror-dates.mjs --check sources/reference/MeitY_gazette_mirror_dates_2026-09-01.txt re fetches MeitY's index and all 9 files, verifies the archive's own digest before trusting it as a baseline, and fails on any change to a recorded date, digest, field name or address.

One limit worth naming, because it bounds the section. This reaches MeitY's library and the files themselves. It does not reach the eGazette portal's own listing, which appears in the first table on this page and is a browser session form we cannot drive from here, so nothing here checks what that portal says about the corrigenda or about any issue other than No. 757.

What this actually means for planning

The honest answer is that the framework's own text gives you a period and the record of its start carries a 1 day ambiguity. That has 3 practical consequences.

  1. Plan to the earlier date. If your programme is built to be ready on 13 May 2027, the 1 day question never affects you. If it is built to land on 14 May 2027, you have made a 1 day ambiguity into a compliance risk for no benefit.
  2. Do not quote either date as settled law. Say "computed from the notification, approximately mid May 2027" in board papers, and cite the period rather than the date. The Rules state 18 months; that is the durable fact.
  3. Watch for an official confirmation. A clarificatory notification or corrigendum from MeitY, or a MeitY FAQ or press release stating the operative dates, would settle this. The Data Protection Board is not a route to it: as at 28 August 2026 it has no appointed members, a status tracked with its sources on whether the Board is operational, and the directions it will be able to give under section 27(1)(a) are urgent remedial or mitigation measures in the event of a personal data breach, not rulings on when a provision commenced. No such confirmation appears in the official sources on file, and none appears anywhere in MeitY's published document library, which was read end to end on 1 September 2026: 2,401 records, of which 28 name the framework and none is a clarification of these dates. The Press Information Bureau release of 3 December 2025 is the closest thing on file and it is not one: it restates a notification date inside a summary of a reply given in the Lok Sabha, without citing a provision or stating an operative deadline. So every calendar date on this site, including 13 May 2027 and 13 November 2026, is labelled interpretation until officially confirmed.

Why we chose the printed date

3 reasons, all about which document controls, and 1 piece of evidence that does not settle anything.

Leaving aside the 2 press releases already dealt with, 2 of the 4 remaining records sit on the same document. The masthead and the notification heading read 13 November 2025, while the file code stamped on the issue embeds 14112025. The other 2 sit outside the document altogether: the eGazette portal's own listing, which for the companion Act notification, issue No. 757, gives 14 November 2025 as the issue and publish date, and MeitY's document library, which dates its copies of all 4 November issues 14 November 2025 and, as shown above, is not a consistent record of any of a document's dates. We take the date the instrument states for itself, because it is the only one of the 4 that the document asserts as its own date, and because the corrigenda published in December 2025 refer back to the notification as dated the 13th November, 2025. No official source on file explains what the date inside the file code records, or what the date in MeitY's index records, so treat this choice as our interpretation rather than a settled rule about which record controls.

The file metadata is the one piece of evidence that could point either way, and we record it without resting on it. Of the DPDP Gazette files measured above, every one states its own production date internally, and on each of the 8 whose masthead and file code differ that stamp falls on the file code date. Read one way the code records when the electronic file was made, which favours the masthead. Read the other way the making of the file is the electronic publication, which favours the code. Nothing on file chooses between those readings, so this moves no computed date on the site.

Consistency also matters more than the individual choice. The Act side notification, Gazette issue No. 757, carries the same split: masthead 13 November 2025, CG code embedding 14112025. Computing the Act group and the Rules group from different bases would produce a timeline that contradicts itself. We take the printed date for both, and we say so on every page that shows a computed date.

The corrigenda issued on 10 December 2025 did reach Rule 1: items (i)(a) and (i)(b) change the closing words of Rule 1(3) and Rule 1(4) from "of this Gazette" to "in the Official Gazette". The 1 year and 18 month periods are unchanged, so no computed date moves. What the corrigenda do add is that an official instrument published in December 2025 twice describes G.S.R. 846(E) as dated the 13th November, 2025, which supports the printed date without settling the date of publication in terms.

The wider lesson about DPDP dates

If a source states a DPDP deadline without saying what it computed from, you cannot check it, and a 1 day gap between 2 sources usually traces to nothing more than the choice of publication date set out above.

The test to apply to any DPDP date you read: does the source name the period from the text, and does it name the publication date it used? If it does neither, it is repeating a number rather than reading the law.

What to do

Settle the dates that apply to your organisation with the compliance plan, which shows the commencement basis beside every action. For the current status of each provision, see what is in force today, and for the full chronology, the DPDP timeline. The original documents, including both Gazette issues and the corrigenda, are listed on the official documents page.

What is in force today, provision by provision →The DPDP timeline, 2017 to 2027 →The official Gazette documents →

CommencementDeadlinesGazetteCorrections

Share this: