Skip to main content

The 3rd and main DPDP commencement date is computed as 13 May 2027, which is interpretation until officially confirmed.

dpdprules.org
Data breached?
☰

Sources last verified on 23 September 2026. Methodology

Tool

Does your notice cover the Rule 3 minimums?

Mark whether your existing or proposed notice covers each element the official text requires. The tool maps your marks to gaps against the exact provisions. It never drafts notice text.

Commencement note: Rules 3, 5 to 16, 22 and 23 are not yet in force. The computed date is 13 May 2027, which is interpretation until officially confirmed. Basis of the computation: Publication date 13 November 2025 printed on Gazette issue No. 760, plus eighteen months. The eGazette portal lists this document with a code embedding 14112025 and the Government's own PIB release states 14 November 2025, which would move the computed date by 1 day; the printed masthead date is used, and the interpretation label carries that uncertainty. The corrigendum wording change does not affect this computation. Building ahead of the duty is the practical move. See Rule 3, official text.

  1. 1. Can your notice be understood on its own, without reading any other document?

    Official basis:

  2. 2. Is the notice written in clear and plain language that gives a fair account of what is needed for informed consent?

    Official basis:

  3. 3. Does it itemise the personal data you collect?

    Official basis:

  4. 4. Does it state the specified purposes and describe the goods, services or uses they enable?

    Official basis:

  5. 5. Does it give the particular link to your website or app, and describe any other means available?

    Official basis:

  6. 6. Can the person withdraw consent using that link or other means, with ease comparable to giving it?

    Official basis:

  7. 7. Does it show how to exercise rights under the Act?

    Official basis:

  8. 8. Does it show how to complain to the Data Protection Board?

    Official basis:

0 of 8 answered · answers stay on this page only

The provisions this tool rests on

The provisions below are the sources for the legal statements on this page. Each links to the official document it was verified against, and to the provision on this site wherever this site publishes that provision. The label says whether the site is reporting a requirement, explaining it, reading it, recommending something, or pointing at a text it does not restate.

  • DPDP Rules 2025, r. 3, (a)

    Official requirement · Verified 16 August 2026

    Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed

    (a) be presented and be understandable independently of any other information that has been, is or may be made available by such Data Fiduciary

    Rule 3 on this site Official source ↗ Also on MeitY (byte identical) ↗

  • DPDP Rules 2025, r. 3, (b)

    Official requirement · Verified 16 August 2026

    Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed

    (b) give, in clear and plain language, a fair account of the details necessary to enable the Data Principal to give specific and informed consent for the processing of her personal data, which shall include, at the minimum, — (i) an itemised description of such personal data; and (ii) the specified purpose or purposes of, and specific description of the goods or services to be provided or uses to be enabled by, such processing

    Rule 3 on this site Official source ↗ Also on MeitY (byte identical) ↗

  • DPDP Rules 2025, r. 3, (b)(i)

    Official requirement · Verified 16 August 2026

    Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed

    (i) an itemised description of such personal data

    Rule 3 on this site Official source ↗ Also on MeitY (byte identical) ↗

  • DPDP Rules 2025, r. 3, (b)(ii)

    Official requirement · Verified 16 August 2026

    Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed

    (ii) the specified purpose or purposes of, and specific description of the goods or services to be provided or uses to be enabled by, such processing

    Rule 3 on this site Official source ↗ Also on MeitY (byte identical) ↗

  • DPDP Rules 2025, r. 3, (c)

    Official requirement · Verified 16 August 2026

    Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed

    (c) give, the particular communication link for accessing the website or app, or both, of such Data Fiduciary, and a description of other means, if any, using which such Data Principal may …

    Rule 3 on this site Official source ↗ Also on MeitY (byte identical) ↗

  • DPDP Rules 2025, r. 3, (c)(i)

    Official requirement · Verified 16 August 2026

    Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed

    (i) withdraw her consent, with the ease of doing so being comparable to that with which such consent was given

    Rule 3 on this site Official source ↗ Also on MeitY (byte identical) ↗

  • DPDP Rules 2025, r. 3, (c)(ii)

    Official requirement · Verified 16 August 2026

    Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed

    (ii) exercise her rights under the Act

    Rule 3 on this site Official source ↗ Also on MeitY (byte identical) ↗

  • DPDP Rules 2025, r. 3, (c)(iii)

    Official requirement · Verified 16 August 2026

    Not yet in force; the computed date is 13 May 2027, which is interpretation until officially confirmed

    (iii) make a complaint to the Board.

    Rule 3 on this site Official source ↗ Also on MeitY (byte identical) ↗

Sources cited on this page

  1. [1]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 3, (a), p. 24. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Official requirement · Verified 16 August 2026
  2. [2]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 3, (b), p. 24. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Official requirement · Verified 16 August 2026
  3. [3]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 3, (b)(i), p. 24. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Official requirement · Verified 16 August 2026
  4. [4]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 3, (b)(ii), p. 24. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Official requirement · Verified 16 August 2026
  5. [5]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 3, (c), p. 24. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Official requirement · Verified 16 August 2026
  6. [6]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 3, (c)(i), p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Official requirement · Verified 16 August 2026
  7. [7]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 3, (c)(ii), p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Official requirement · Verified 16 August 2026
  8. [8]
    Digital Personal Data Protection Rules, 2025 (English section of Gazette No. 760) (G.S.R. 846(E)), r. 3, (c)(iii), p. 25. Published 13 November 2025. Official source ↗ Also on MeitY (byte identical) ↗ · Official requirement · Verified 16 August 2026

Read the guide

What must a DPDP privacy notice contain? Each Rule 3 minimum with the official text, plus the section 5 elements a coverage review alone will miss.