The Digital Personal Data Protection Rules are officially gazetted by the Government of India
Consent Manager framework becomes enforceable — businesses must have a compliant consent mechanism in place
Every DPDP obligation — data classification, DSARs, purpose limitation, breach reporting — becomes legally binding
Data Protection Board initiates audits. Non-compliant firms face penalties up to ₹250 crore per violation

