DPDP resource centre
Understand the law.
Prepare the business.
Plain-English implementation notes for management and technology teams, anchored to official Government of India sources.
Timeline
DPDP implementation timeline
What commenced in November 2025, what follows after one year, and what major obligations commence after 18 months.
Checklist
Management readiness checklist
The questions a CEO, CIO, CISO, CFO or legal head should be asking across data, systems, vendors and controls.
Operations
From policy to evidence
Why a written policy is not enough when systems cannot execute deletion, consent withdrawal, breach workflows or rights requests.
Official sources
Start with primary material.
For the definitive legal text and commencement position, use the Government of India / MeitY materials below rather than summaries on commercial websites.
MeitY — Digital Personal Data Protection Rules, 2025↗Gazette — DPDP Rules, 2025↗Gazette — DPDP Act commencement notification↗
Phased commencement: major substantive provisions of the Act and corresponding Rules are scheduled to commence 18 months after 13 November 2025, i.e. 13 May 2027. Some provisions commenced earlier.
Don't just read
Measure your current state.
A resource library is useful. A scored view of your organisation is more actionable.
Take the readiness assessment →12Questions
6Pillars