Govt Notifies Commencement Dates for DPDP Act, 2023

Notification No. G.S.R. 843(E), Dated: 13.11.2025

1. Background

The Government of India has issued a notification specifying the dates on which different provisions of the Digital Personal Data Protection (DPDP) Act, 2023, shall come into force. This staged implementation ensures that data fiduciaries, consent managers, and regulatory institutions have sufficient time to align their systems with the new compliance framework.

2. Immediate Enforcement

Certain sections of the Act will come into force immediately upon publication of the notification in the Official Gazette. These provisions primarily relate to the administrative setup and preliminary aspects necessary for operationalising the framework under the Act.

3. Deferred Implementation

The notification provides a phased timeline for bringing the remaining provisions into effect:

• One year from the date of publication

1. 1. Section 6(9)
   2. Clause (d) of Section 27(1)

These provisions primarily concern specific procedural and compliance obligations that require preparatory adjustments by data fiduciaries and government entities.

• Eighteen months from the date of publication

  • Sections 3 to 17 and Sections 28 to 44 – These sections encompass the core operational framework of the DPDP Act, including the rights of data principals, obligations of data fiduciaries, and functions and powers of the Data Protection Board of India (DPBI).

4. Significance

This staggered enforcement approach allows for:

• Institutional readiness through the establishment of the DPBI and consent management systems,
• Capacity building for data fiduciaries to implement compliance mechanisms, and
• Smooth transition for individuals and entities to adapt to India’s new data protection regime.

Click Here To Read The Full Notification