Skip to main content
Industries

The rules and risks of your industry, across borders.

Licences, value chains and the questions businesses in each industry ask first, with the services that usually apply.

Ask about your industry

Licences, approvals and first steps.

Ask WONE Global what applies to your industry in a market, with the sources shown.

Ask WONE Global→
People & firms

The WONE Global Partners in each market.

Named senior professionals, each admitted as the one firm for a service in their country, and the firms they lead.

For professional firms

Lead your service in your market.

One Partner per service, per jurisdiction, admitted by review against published criteria.

Open Partnerships→
Insights

Sourced answers on doing business across borders.

Every statement is labelled: source-checked, professionally reviewed or not yet checked, with its source and date where checked.

Ask WONE Global

Ask your question.

Answers come from statements checked against official sources, with the sources shown. Research, not advice.

Ask WONE Global→

India: The Digital Personal Data Protection Rules 2025 were notified in November 2025 with an eighteen-month period for…

A change recorded in WONE Global’s guide to India, under data protection.

WONE Global's guide to India records these changes under data protection. Each statement below has been checked against the source it links to.

  1. The Digital Personal Data Protection Rules 2025 were notified in November 2025 with an eighteen-month period for phased compliance.

    Central rules made by MeitY under the DPDP Act.

    Press Information Bureau, Government of India · Digital Personal Data Protection Rules, 2025 (backgrounder, 17 November 2025) ↗ Checked against an official source · Not yet professionally reviewed · checked 18 October 2026

  2. The Data Protection Board of India consists of four members and operates as a digital body, with complaints filed and tracked online.

    Board established with effect from 13 November 2025.

    Press Information Bureau, Government of India · Digital Personal Data Protection Rules, 2025 (backgrounder, 17 November 2025) ↗ Checked against an official source · Not yet professionally reviewed · checked 18 October 2026

  3. Section 18 of the DPDP Act, which establishes the Data Protection Board of India, came into force on 13 November 2025, while the core obligations including sections 3, 8, 9, 16 and 29 commence eighteen months after that date.

    Central law; commencement by notification under section 1(2).

    India Code (Legislative Department, Ministry of Law and Justice) · The Digital Personal Data Protection Act, 2023 (No. 22 of 2023) ↗ Checked against an official source · Not yet professionally reviewed · checked 18 October 2026

  4. Under rule 1 of the DPDP Rules 2025, rules 1, 2 and 17 to 21 took effect on publication (13 November 2025), rule 4 takes effect one year later (13 November 2026) and rules 3, 5 to 16, 22 and 23 take effect eighteen months later (13 May 2027).

    Central rules. Rule 4 concerns consent managers; rules 3 and 5 to 16 contain most operational duties of data fiduciaries.

    SCC Online · MeitY notified Digital Personal Data Protection Rules, 2025 ↗ Checked against a secondary source · Not yet professionally reviewed · checked 18 October 2026

This is a summary of the rule as published, not advice on how it applies to you. The WONE Global Partner for this service in India can advise on that.