India’s data privacy law comes into force, two years after it was passed
New Delhi: India’s long-awaited data-privacy regime formally kicked in on Friday. More than two years after the Digital Personal Data Protection Act, 2023 (DPDP Act) was passed by Parliament, the ministry of electronics & information technology (MeitY) notified the rules and established a four-member data-protection board, bringing the law into effect.
Companies will need to comply with the Act’s provisions within 12–18 months, including appointing consent managers and data-protection officers, putting in place systems for express user permission, and reporting data breaches within 72 hours.
