DPDP Rules
Operational index · 2025
General
The operational detail of the Act, indexed by the area it puts into practice.
How to read this: Each card is one of the 23 notified rules. Click a card for a plain-English summary, key points, and the official gazette text - or download the full PDF above.
Official name of the Rules and when each rule comes into force
Read ruleKey terms used throughout the Rules and how they link to the Act
Read ruleItemised, plain-language notice with the means to withdraw consent
Read ruleEligibility, obligations and the duties of a registered Consent Manager
Read ruleConditions for legitimate processing by the State and its instrumentalities
Read ruleEncryption, access control, logging and backups expected of a Fiduciary
Read ruleWhat to tell affected principals and the Board, and how quickly
Read ruleWhen personal data must be deleted once its purpose is served
Read rulePublishing a clear point of contact for data-protection queries
Read ruleReliable methods to confirm a parent's identity and age before processing
Read ruleHow lawful guardians give consent on behalf of persons with disability
Read ruleClasses of Fiduciaries and purposes given limited relief
Read ruleDPIA, annual audit and algorithmic-risk diligence
Read ruleHow to make access, correction, erasure and grievance requests
Read ruleConditions and restrictions on cross-border data flows
Read ruleRelief for research, archiving and statistical purposes, with standards
Read ruleSearch-cum-selection process for the Data Protection Board
Read ruleCompensation and conditions for Board Chairperson and Members
Read ruleHow the Board convenes, decides matters, and completes inquiries
Read ruleTech-driven, paperless functioning of the Board and proceedings
Read ruleAppointment and service conditions for Board officers and employees
Read ruleThe digital process for appealing the Board's decisions
Read ruleWhat the Government may require from a Fiduciary or intermediary
Read ruleThe mapping view puts the statute and the 2025 Rules side by side, so nothing is lost in translation.
Open the Act