DPDP Rules 2025 | Ardent Privacy

Skip to content

Home For Individuals For Organizations DPDPA DPDP Rules 2025 AI Security Bharat Privacy Yatra Resources Top Privacy Vendors

DPDP RULES 23 Rules · 7 Schedules

DPDP RulesFAQ

RULES

Rule 1 - Short title and commencement01 Rule 2 - Definitions02 Rule 3 - Notice given by Data Fiduciary to Data Principal03 Rule 4 - Registration and obligations of Consent Manager04 Rule 5 - Processing for subsidy, benefit, service, certificate, licence or permit05 Rule 6 - Reasonable security safeguards06 Rule 7 - Intimation of personal data breach07 Rule 8 - Time period for specified purpose08 Rule 9 - Contact information about processing09 Rule 10 - Verifiable consent for a child10 Rule 11 - Verifiable consent for a person with disability11 Rule 12 - Exemptions for processing of a child’s data12 Rule 13 - Additional obligations of Significant Data Fiduciary13 Rule 14 - Rights of Data Principals14 Rule 15 - Transfer of personal data outside India15 Rule 16 - Research, archiving or statistical purposes16 Rule 17 - Appointment of Chairperson and other Members17 Rule 18 - Salary, allowances and terms of service18 Rule 19 - Meetings of the Board19 Rule 20 - Functioning of Board as digital office20 Rule 21 - Officers and employees of Board21 Rule 22 - Appeal to Appellate Tribunal22 Rule 23 - Calling for information23

SCHEDULES

First Schedule - Consent ManagerI Second Schedule - State processing standardsII Third Schedule - Retention periodsIII Fourth Schedule - Child-data exemptionsIV Fifth Schedule - Chairperson and MembersV Sixth Schedule - Board officers and employeesVI Seventh Schedule - Calling for informationVII

Open the full official PDF↗

ARDENT PRIVACY · INDIA

Make privacy compliance actionable.

Talk to our team ↗

Privacy research from Ardent Privacy.

Privacy Notice Cookie Policy