The 3rd and main DPDP commencement date is computed as 13 May 2027, which is interpretation until officially confirmed. What is in force today
Sources last verified on 21 October 2026. Methodology
Archive
60 articles on the DPDP Act 2023 and the DPDP Rules 2025, newest first. Every legal claim cites the official source it rests on.
Security
Rule 6 names 7 security minimums and not 1 is in force yet: the Rule commences on a computed 13 May 2027, interpretation until officially confirmed. The 7: encryption or masking, access control, visibility through logs and monitoring, backups, logs and personal data retained 1 year unless another law requires otherwise, processor contract terms and organisational measures.
Penalties
Section 32 is not in force: the voluntary undertaking settlement track starts on a computed 13 May 2027, interpretation until officially confirmed. Once it commences the Data Protection Board may accept an undertaking that bars further proceedings on its contents, and breaking a term revives the section 33 penalty route.
Definitions
Usually yes in ordinary business records. The Act's definition turns on identifiability, and in real records names and email addresses identify people. What the definition says and what follows.
Compliance
No Significant Data Fiduciary duty is in force yet: section 10 commences on a computed 13 May 2027, interpretation until officially confirmed. SDF status will arrive by government notification against the section 10 factors, not by crossing a user count. The real numbers in the framework, the duties that follow, and the vendor thresholds that do not exist.
Children
Rule 10 is not in force yet: it commences on a computed 13 May 2027, interpretation until officially confirmed. The Rules define verifiable consent by pointing at 2 other rules. What Rule 10 actually requires of a parent check, the 4 cases it illustrates, and the Digital Locker route that Rule 10(2)(c) leaves to a future notification.
Notice
Section 5 names 3 things the notice must inform and Rule 3 sets its shape and 2 minimums, but neither is in force yet. What the text requires, and what it does not.
