As stakeholders across industries have been awaiting the practical implementation of the Digital Personal Data Protection Act, 2023 (“DPDPA”), the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) have finally been released on November 14, 2025. These Rules, intended to operationalise the DPDPA, provide much-needed clarity on how provisions of the Act are expected to practically function. 

​

This marks a substantial transformation of India’s data protection landscape. Considering the steep statutory penalties (not to mention reputational loss) for failure to comply, it is crucial for organizations to start charting out and implementing action plans to ensure data privacy compliance.