Skip to main content

The 3rd and main DPDP commencement date is computed as 13 May 2027, which is interpretation until officially confirmed.

dpdprules.org
Data breached?
☰

Sources last verified on 23 September 2026. Methodology

DPDP Rules 2025 · Rule 4

Registration and obligations of Consent Manager

Status
Not yet in force
Commencement
13 November 2026 · computed date, presented as interpretation until officially confirmed (how it is computed)
Source
Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) · G.S.R. 846(E) · Gazette page 25
Last verified
17 August 2026

What Rule 4 says, in plain English

Plain English

Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed. The summary below is what the provision says, not what is in force today. Status last checked 28 September 2026 against the MeitY library and India Code.

Anyone meeting the First Schedule conditions may apply to the Board for registration as a Consent Manager, and the Board may register or reject the application with reasons. Registered Consent Managers must follow the Schedule's obligations, and the Board can direct compliance measures, demand information, or suspend or cancel a registration after a hearing.

How 13 November 2026 is computed, and why it could be 1 day later

Publication date 13 November 2025 printed on Gazette issue No. 760, plus one year. The eGazette portal lists this document with a code embedding 14112025 and the Government's own PIB release states 14 November 2025, which would move the computed date by 1 day; the printed masthead date is used, and the interpretation label carries that uncertainty. The corrigendum wording change does not affect this computation.

Official text of Rule 4

Official requirement · verbatim

Rule 4. Registration and obligations of Consent Manager.(1) A person who fulfils the conditions for registration of Consent Managers set out in Part A of First Schedule may apply to the Board for registration as a Consent Manager by furnishing such particulars and such other information and documents as the Board may publish in this behalf on its website. (2) On receipt of such application, the Board may make such inquiry as it may deem fit to satisfy itself regarding fulfilment of the conditions set out in Part A of First Schedule, and if it — (a) is satisfied, register the applicant as a Consent Manager, under intimation to the applicant, and publish on its website the particulars of such Consent Manager; or (b) is not satisfied, reject the application and communicate the reasons for the rejection to the applicant. (3) The Consent Manager shall have obligations as specified in Part B of First Schedule. (4) If the Board is of the opinion that a Consent Manager is not adhering to the conditions and obligations under this rule, it may, after giving an opportunity of being heard, inform the Consent Manager of such non-adherence and direct the Consent Manager to take measures to ensure adherence. (5) The Board may, if it is satisfied that it is necessary so to do in the interests of Data Principals, after giving the Consent Manager an opportunity of being heard, by order, for reasons to be recorded in writing, — (a) suspend or cancel the registration of such Consent Manager; and (b) give such directions as it may deem fit to that Consent Manager, to protect the interests of the Data Principals. (6) The Board may, for the purposes of this rule, require the Consent Manager to furnish such information as the Board may call for.

Commencement basis · Rule 4

“Rule 4 shall come into force one year after the date of publication in the Official Gazette.”

Wording as corrected by corrigenda G.S.R. 892(E).

Sources cited on this page

  1. [1]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 4, p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Official requirement · Verified 17 August 2026Not yet in force; the computed date is 13 November 2026, which is interpretation until officially confirmed
  2. [2]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 1, (3), p. 24. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Printed text, since corrected by G.S.R. 892(E); quoted as published · Verified 16 August 2026In force since 13 November 2025
    Rule 4 shall come into force one year after the date of publication of this Gazette.
    As printed. Corrigenda G.S.R. 892(E) item (i)(a) corrects the closing words to read in the Official Gazette; the computation is unaffected.
  3. [3]
    Digital Personal Data Protection Rules, 2025 (G.S.R. 846(E)), p. 1. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Interpretation, requires judgment · Verified 16 August 2026Document status: published; text subject to corrigendum G.S.R. 892(E)The calendar date 13 November 2026 is computed from the printed publication date and is presented as interpretation until officially confirmed.