Rule 17Cross-Border Transfer & Research Exemptions
Evaluation for cross-border transfer restrictions
What the Rule sets out
Restrictions on transferring personal data to specified countries or territories are to be based on the recommendation of a government-constituted committee assessing factors bearing on India's national interest, and are to be notified before taking effect rather than applied retroactively without notice.
What this means in practice
- Track the government's notified list directly rather than assuming any particular destination is or isn't restricted — this list can change and is the operative fact, not a general geopolitical assumption.
Summarised for practical use from the publicly notified DPDP Rules, 2025. Confirm exact clause text against the official Gazette notification before relying on it for compliance decisions.