Skip to main content

The 3rd and main DPDP commencement date is computed as 13 May 2027, which is interpretation until officially confirmed.

Sources last verified on 23 September 2026. Methodology

Tag

Articles tagged Data Protection Officer

2 articles on this site carry this tag. Open any of them for the source documents behind their legal claims, with a claim type label on every source.

Compliance

Data Protection Officer under the DPDP Act: who must appoint one

Nobody owes a DPO yet: section 10(2)(a) commences on a computed 13 May 2027, interpretation until officially confirmed. Only a notified Significant Data Fiduciary will owe one. Every other Data Fiduciary will owe a published contact person instead, under section 8(9) and Rule 9, which commence on the same date.

Compliance

Additional obligations of a Significant Data Fiduciary: DPO, auditor, DPIA

Section 10 adds an India based DPO, an independent auditor and a 12 month Rule 13 DPIA and audit cycle once notified: all 3 commence on a computed 13 May 2027. That date is interpretation until officially confirmed. The DPO answers to the board of directors, and Rule 13 adds algorithmic due diligence and conditional localisation.

The provisions these articles point to

Each page carries the official text of the provision, its commencement status and the sources behind it.

Tools for this topic

Free, no login, and each one shows the provisions its answers rest on.