Current status
SPDI Rules 2011: still in force, and what the DPDP Act does to them
On the Gazette prints on file, read as at 6 September 2026, the Information Technology SPDI Rules 2011 still bind a body corporate. Rule 3 is where sensitive personal data is defined in Indian law, and section 44(2) of the DPDP Act, which directs the omission of section 43A, has not commenced.