DPDP Rules 2025 · Rule 23
Calling for information from Data Fiduciary or intermediary
- Status
- Not yet in force
- Commencement
- 13 May 2027 · computed date, presented as interpretation until officially confirmed (how it is computed)
- Source
- Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) · G.S.R. 846(E) · Gazette page 32
- Last verified
- 17 August 2026
What Rule 23 says, in plain English
Plain English
Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed. The summary below is what the provision says, not what is in force today. Status last checked 28 September 2026 against the MeitY library and India Code.
For the purposes specified in the Seventh Schedule, the Central Government, acting through the authorised person named there, may require any Data Fiduciary or intermediary to furnish information within a specified period. Where disclosure could prejudice India's sovereignty, integrity or state security, it may direct that the request not be revealed to anyone without the authorised person's prior written permission.
How 13 May 2027 is computed, and why it could be 1 day later
Publication date 13 November 2025 printed on Gazette issue No. 760, plus eighteen months. The eGazette portal lists this document with a code embedding 14112025 and the Government's own PIB release states 14 November 2025, which would move the computed date by 1 day; the printed masthead date is used, and the interpretation label carries that uncertainty. The corrigendum wording change does not affect this computation.
Official text of Rule 23, as corrected by G.S.R. 892(E)
Corrected by corrigenda G.S.R. 892(E)
- For “given in such” read “given in such order” (page 32, line 4)
The text below shows the corrected wording.
Rule 23. Calling for information from Data Fiduciary or intermediary.(1) The Central Government may, for such purposes of the Act as are specified in Seventh Schedule, acting through the corresponding authorised person specified in the said Schedule, require any Data Fiduciary or intermediary to furnish such information as may be called for, within the specified period as may be given in such order. (2) Where the disclosure of furnishing of information as referred to in sub-rule (1) is likely to prejudicially affect the sovereignty and integrity of India or security of the State, the Central Government may require the Data Fiduciary or intermediary to not disclose such furnishing to affected Data Principal or any other person except with the previous permission, in writing, of the authorised person. (3) For the purposes of this rule, the expression “intermediary” shall have the same meaning as assigned to it in the Information Technology Act, 2000 (21 of 2000).
Show the text as originally printed, before corrigendum
(1) The Central Government may, for such purposes of the Act as are specified in Seventh Schedule, acting through the corresponding authorised person specified in the said Schedule, require any Data Fiduciary or intermediary to furnish such information as may be called for, within the specified period as may be given in such. (2) Where the disclosure of furnishing of information as referred to in sub-rule (1) is likely to prejudicially affect the sovereignty and integrity of India or security of the State, the Central Government may require the Data Fiduciary or intermediary to not disclose such furnishing to affected Data Principal or any other person except with the previous permission, in writing, of the authorised person. (3) For the purposes of this rule, the expression “intermediary” shall have the same meaning as assigned to it in the Information Technology Act, 2000 (21 of 2000).
Commencement basis · Rules 3, 5 to 16, 22 and 23
“Rules 3, 5 to 16, 22 and 23 shall come into force eighteen months after the date of publication in the Official Gazette.”
Wording as corrected by corrigenda G.S.R. 892(E).
Sources cited on this page
- [1]Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 23, p. 32. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Official requirement · Verified 17 August 2026Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed
- [2]Corrigenda to the Digital Personal Data Protection Rules, 2025 (G.S.R. 892(E)), (iii), p. 1. Published 11 December 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Pointer to the official correction, not a requirement · Verified 16 August 2026Document status: published; in effectCorrigendum item (iii) corrects "given in such" to "given in such order" at Gazette page 32 line 4.
- [3]Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 1, (4), p. 24. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Printed text, since corrected by G.S.R. 892(E); quoted as published · Verified 16 August 2026In force since 13 November 2025
Rules 3, 5 to 16, 22 and 23 shall come into force eighteen months after the date of publication of this Gazette.
As printed. Corrigenda G.S.R. 892(E) item (i)(b) corrects the closing words to read in the Official Gazette; the computation is unaffected. - [4]Digital Personal Data Protection Rules, 2025 (G.S.R. 846(E)), p. 1. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Interpretation, requires judgment · Verified 16 August 2026Document status: published; text subject to corrigendum G.S.R. 892(E)The calendar date 13 May 2027 is computed from the printed publication date and is presented as interpretation until officially confirmed.
- [5]Corrigenda to the Digital Personal Data Protection Rules, 2025 (G.S.R. 892(E)), (iii), p. 1. Published 11 December 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Official correction to the printed text, quoted · Verified 16 August 2026Document status: published; in effect
in page 32, line 4, for “given in such”, read “given in such order”