The 3rd and main DPDP commencement date is computed as 13 May 2027, which is interpretation until officially confirmed. What is in force today
Sources last verified on 28 October 2026. Methodology
Tag
5 articles on this site carry this tag. Open any of them for the source documents behind their legal claims, with a claim type label on every source.
Applicability
The DPDP Act has no health data category, and section 7, not in force until a computed 13 May 2027, names no routine treatment clause. That date is interpretation until officially confirmed. On this site's reading, consent and 3 legitimate uses do most of the work; plus child patient relief, the guardian gap, records and the SPDI Rules meanwhile.
Official documents
S.O. 5458(E) changes words in sections 9(1) and 10(2)(c)(ii), and neither section is in force yet. Both paragraphs quoted, the comma the Order quotes that the Act does not print, the dates on its Gazette print, and the 3 year limit on section 43 orders.
Children
The DPDP education carve out covers tracking and behavioural monitoring only. Admissions, fees and most edtech accounts will still need verifiable parental consent.
Children
The child definition is in force and the section 9 duties are not: they commence on a computed 13 May 2027, interpretation until officially confirmed. What section 9 requires, the tracking and targeted advertising ban, Rule 10 verification and the Fourth Schedule exemptions.
Children
Rule 10 is not in force yet: it commences on a computed 13 May 2027, interpretation until officially confirmed. The Rules define verifiable consent by pointing at 2 other rules. What Rule 10 actually requires of a parent check, the 4 cases it illustrates, and the Digital Locker route that Rule 10(2)(c) leaves to a future notification.
Each page carries the official text of the provision, its commencement status and the sources behind it.
Free, no login, and each one shows the provisions its answers rest on.
