Skip to main content
dpdprules.org
Data breached?
☰

Sources last verified on 17 August 2026. Methodology

DPDP Rules 2025 · Rule 23

Calling for information from Data Fiduciary or intermediary

Status
Not yet in force
Commencement
13 May 2027 · computed date, presented as interpretation until officially confirmed (Publication date 13 November 2025 printed on Gazette issue No. 760, plus eighteen months. The corrigendum wording change does not affect this computation.)
Source
Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) · G.S.R. 846(E) · Gazette page 32
Last verified
17 August 2026

Corrected by corrigenda G.S.R. 892(E)

  • For “given in such” read “given in such order” (page 32, line 4)

The text below shows the corrected wording.

Official requirement · verbatim

Rule 23. Calling for information from Data Fiduciary or intermediary.(1) The Central Government may, for such purposes of the Act as are specified in Seventh Schedule, acting through the corresponding authorised person specified in the said Schedule, require any Data Fiduciary or intermediary to furnish such information as may be called for, within the specified period as may be given in such order. (2) Where the disclosure of furnishing of information as referred to in sub-rule (1) is likely to prejudicially affect the sovereignty and integrity of India or security of the State, the Central Government may require the Data Fiduciary or intermediary to not disclose such furnishing to affected Data Principal or any other person except with the previous permission, in writing, of the authorised person. (3) For the purposes of this rule, the expression “intermediary” shall have the same meaning as assigned to it in the Information Technology Act, 2000 (21 of 2000).

Show the text as originally printed, before corrigendum

(1) The Central Government may, for such purposes of the Act as are specified in Seventh Schedule, acting through the corresponding authorised person specified in the said Schedule, require any Data Fiduciary or intermediary to furnish such information as may be called for, within the specified period as may be given in such. (2) Where the disclosure of furnishing of information as referred to in sub-rule (1) is likely to prejudicially affect the sovereignty and integrity of India or security of the State, the Central Government may require the Data Fiduciary or intermediary to not disclose such furnishing to affected Data Principal or any other person except with the previous permission, in writing, of the authorised person. (3) For the purposes of this rule, the expression “intermediary” shall have the same meaning as assigned to it in the Information Technology Act, 2000 (21 of 2000).

Commencement basis · Rules 3, 5 to 16, 22 and 23

“Rules 3, 5 to 16, 22 and 23 shall come into force eighteen months after the date of publication in the Official Gazette.”

Wording as corrected by corrigenda G.S.R. 892(E).

Sources cited on this page

  1. [1]Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 23, p. 32. Published 13 November 2025. Official source ↗ · Official requirement · Verified 17 August 2026
  2. [2]Corrigenda to the Digital Personal Data Protection Rules, 2025 (G.S.R. 892(E)), (iii), p. 1. Published 11 December 2025. Official source ↗ · Official requirement · Verified 16 August 2026Corrigendum item (iii) corrects "given in such" to "given in such order" at Gazette page 32 line 4.
  3. [3]Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 1, (4), p. 24. Published 13 November 2025. Official source ↗ · Official requirement · Verified 16 August 2026As printed. Corrigenda G.S.R. 892(E) item (i)(b) corrects the closing words to read in the Official Gazette; the computation is unaffected.
  4. [4]Digital Personal Data Protection Rules, 2025 (G.S.R. 846(E)), p. 1. Published 13 November 2025. Official source ↗ · Interpretation, requires judgment · Verified 16 August 2026The calendar date 13 May 2027 is computed from the printed publication date and is presented as interpretation until officially confirmed.
  5. [5]Corrigenda to the Digital Personal Data Protection Rules, 2025 (G.S.R. 892(E)), (iii), p. 1. Published 11 December 2025. Official source ↗ · Official requirement · Verified 16 August 2026