Sources

Verified August 2026 · Checked monthly

The government documents this site relies on: the Act, the Rules, the commencement notifications and the parliamentary record.

The law itself

The Digital Personal Data Protection Act, 2023
Act No. 22 of 2023, assented 11 August 2023. Nine chapters, forty-four sections and one Schedule. Published by India Code, maintained by the Ministry of Law and Justice. Also available from MeitY.

Commencement notification, G.S.R. 843(E), 13 November 2025
Made under section 1(2). Appoints three commencement dates for different provisions of the Act. This is the document behind the Act table on the status tracker. MeitY publishes the gazette copy. India Code carries the same file as Enforcement Timeline for the DPDP Act.
The Digital Personal Data Protection Rules, 2025, G.S.R. 846(E), 13 November 2025
Made under section 40(1) and 40(2). Twenty-three rules and seven Schedules. Rule 1(2) carries the commencement clause. MeitY publishes the gazette copy. India Code also carries it, in English and in Hindi.
Corrigendum to the Rules, G.S.R. 892(E), 10 December 2025
Five typographical corrections to G.S.R. 846(E). None changes a rule number or a Schedule. One changes a clause range from (a) to (f) into (a) to (g).
Establishment of the Data Protection Board of India, 13 November 2025
Establishes the Board under section 18. A second notification of the same date fixes the Board at a chairperson and four members.

PRS Legislative Research, the DPDP Bill, 2023
Introduction, passage and assent dates, with the Bill text as introduced.
PRS Legislative Research, the Personal Data Protection Bill, 2019
Introduction on 11 December 2019 and withdrawal on 3 August 2022.
The Srikrishna Committee report, 27 July 2018
A Free and Fair Digital Economy: Protecting Privacy, Empowering Indians, with the draft Personal Data Protection Bill, 2018.

LiveLaw, 1 August 2026, on the Data Protection Board
Reports that the Board has no appointed chairperson and no appointed members, and covers the direction of the Madhya Pradesh High Court at Indore in Parth Sharma v. Union of India.
Supreme Court Observer on Puttaswamy
The nine-judge decision of 24 August 2017 holding that privacy is a fundamental right, which is the constitutional starting point for this Act.