Skip to content
Jurisdiction ยท 1 regulation

India: data, AI and cyber laws

1 regulation in India that affect companies handling data: India DPDP Act. Part of APAC.

  • EnactedPrivacyChildren

    Next: Nov 13, 2026 Consent Manager registration rule in force (12 months)

Upcoming deadlines

November 20261 deadline

  1. Consent Manager registration rule in force (12 months)

    Rule 4 (registration and obligations of Consent Managers) comes into force one year after publication.

    Transitionin 50 daysSource

May 20271 deadline

  1. Main data fiduciary obligations apply (18 months)

    Rules 3, 5-16, 22 and 23 (notice, security safeguards, breach notification, retention, children's consent, SDF duties, cross-border) come into force 18 months after publication.

    Compliance deadlinein 8 monthsSource

Past deadlines

November 20251 deadline

  1. DPDP Rules published; Board and procedural rules in force

    Rules 1, 2 and 17-21 (Data Protection Board constitution and functioning) take effect on publication in the Official Gazette.

    Takes effect10 months agoSource

When the rules change: new data, privacy and AI laws and deadlines, the next morning.