Ministry : Ministry of Electronics and Information Technology (Not Applicable)
Part II-Section 3-Sub-Section (i)
Subject : Extra Ordinary
Overview [GIDH 2025 Extraordinary – Part II]
This extraordinary gazette notification under the Digital Personal Data Protection Act, 2023 (DPDPA) specifies key effective dates for various provisions of the law, marking a critical implementation milestone for India’s data protection framework.
Key Points
- Effective Date for Sections 1, 2, 18–26, 35, 38–43, and 44(1)&(3): One year from the publication date (13 November 2025).
- Effective Date for Sections 3–5, 6(1)–(8), 7–10, 11–17, 27, 28–34, 36, 37, and 44(2): Eighteen months from the publication date.
- Section 6(9) and 27(1)(g): Takes effect simultaneously with the eighteen-month provisions.
- Official Authority: Issued by the Ministry of Electronics and Information Technology, with digitally authenticated signature of Joint Secretary Ajit Kumar.
Summary
This gazette notification operationalizes the Digital Personal Data Protection Act, 2023 by setting phased implementation timelines: core provisions take effect one year from publication, while a broader set of sections—including data subject rights and regulatory functions—activate after eighteen months. This staged rollout enables organizations and regulators to prepare compliance frameworks, with immediate obligations for certain provisions and extended preparation periods for more complex regulatory requirements.
