Data privacy law comes into force

The government on Friday notified the Digital Personal Data Protection (DPDP) Rules 2025, thus setting in motion the phased rollout of the Digital Personal Data Protection Act, 2023. Most of the compliance obligations affecting both consumers and companies will only take effect 18 months from the date of notification, giving firms across digital sectors, ranging from social media and e-commerce to fintech and telecom, a transition time to align their platforms, consent systems and data-retention practices with the law.