DPDP Rules are notified and enforcement is phased through May 2027. Here's what your business needs to do now.
Swipe up for the full story
MeitY notified the DPDP Rules in November 2025. Full enforcement is phased through May 2027 — and soft enforcement has already begun.
Serious violations can cost up to ₹250 crore. General violations can cost up to ₹5 crore — per instance.
Ten steps cover most businesses: grievance officer, data mapping, valid consent, processor agreements, and a breach response plan.