India: data, AI and cyber laws
1 regulation in India that affect companies handling data: India DPDP Act. Part of APAC.
1 regulation
Add to calendar
- India DPDP Act
India
EnactedPrivacyChildrenNext: Nov 13, 2026 Consent Manager registration rule in force (12 months)
Upcoming deadlines
November 20261 deadline
Consent Manager registration rule in force (12 months)
Rule 4 (registration and obligations of Consent Managers) comes into force one year after publication.
May 20271 deadline
Main data fiduciary obligations apply (18 months)
Rules 3, 5-16, 22 and 23 (notice, security safeguards, breach notification, retention, children's consent, SDF duties, cross-border) come into force 18 months after publication.
Past deadlines
November 20251 deadline
DPDP Rules published; Board and procedural rules in force
Rules 1, 2 and 17-21 (Data Protection Board constitution and functioning) take effect on publication in the Official Gazette.