DPDP Timeline & Implementation Explorer
A chronological explorer of enactment, notified sections, draft and final Rules, and Board formation milestones.
Puttaswamy judgment
The Supreme Court of India recognises the right to privacy as a fundamental right under Article 21, setting the constitutional foundation for a dedicated data protection law.
Justice Srikrishna Committee report
The expert committee submits its report along with a draft Personal Data Protection Bill, shaping the framework that would evolve over the next five years.
Personal Data Protection Bill, 2019 introduced
An earlier version of the bill is introduced in the Lok Sabha and referred to a Joint Parliamentary Committee for detailed review.
PDP Bill, 2019 withdrawn
The government withdraws the earlier bill, citing the need for a more comprehensive legislative framework.
Draft Digital Personal Data Protection Bill, 2022 released
A significantly restructured draft is released for public consultation, forming the direct basis of the eventual Act.
DPDP Act, 2023 enacted
The Digital Personal Data Protection Act, 2023 is passed by Parliament, receives Presidential assent, and is published in the Gazette of India as India's first cross-sectoral data protection statute.
Draft DPDP Rules, 2025 published
The Ministry of Electronics & Information Technology releases the draft Rules for public consultation, detailing notice content, breach timelines, consent managers, and more.
DPDP Rules finalised and notified
Following the consultation period, the Rules are finalised and notified, together with a phased timeline for provisions of the Act itself to come into force.
Data Protection Board of India operationalised
The Board is established and begins functioning as a digital-first regulator, receiving breach intimations and complaints as further provisions are notified.
Dates reflect publicly reported legislative milestones and are provided for orientation. Confirm exact notification dates against official MeitY and Gazette publications.