DPDP Rules 2025 · Notified 13 Nov 2025

Meet India's DPDP Act with Privana Pro.

The Digital Personal Data Protection Act, 2023 is fully operational. Every organisation processing personal data of individuals in India is now a Data Fiduciary — with a hard compliance deadline and penalties that reach ₹250 crore. Privana Pro gets you ready, end to end.

The gap assessment must be completed before 13 November 2026.

Talk to our Team Why Privana Pro

DPDP at a glance

The lawDPDP Act 2023 + DPDP Rules 2025 (Gazette G.S.R. 846(E))

Gap assessment before 13 November 2026The gap assessment must be completed before this date

Full compliance by 13 May 202718-month phased timeline from notification

Penalties up to ₹250 croreFor failure to maintain reasonable security safeguards

Applies to youAny startup, enterprise or MNC processing Indian personal data

The regulation

What the DPDP Act requires

A consent-led, rights-based framework governing how organisations collect, process, store and protect personal data in India.

Lawful consent & notice

Clear, itemised, standalone consent notices with an easy right to withdraw at any time.

Data principal rights

Honour rights to access, correction, erasure and grievance redressal within defined SLAs.

Breach notification

Notify the Data Protection Board and affected individuals of personal data breaches.

Records (RoPA)

Maintain records of processing activities and retain activity logs for the mandated period.

DPIA & audit (SDFs)

Significant Data Fiduciaries must run annual DPIAs and independent data-protection audits.

Children's data

Verifiable parental consent and special protections for children and persons with disabilities.

The clock is ticking

Phased compliance timeline

The staggered timeline offers breathing space — but a mature DPDP programme takes 9–12 months to build.

13 November 2025

Rules notified · Board operational

DPDP Rules 2025 come into force; the Data Protection Board of India and complaint mechanisms go live.

13 November 2026

Consent Manager registration opens

Provisions for Consent Managers take effect 12 months from notification.

13 May 2027

Full compliance required

Consent systems, privacy notices, data-principal rights, breach protocols — everything must be in place.

The cost of getting it wrong

Penalties under the DPDP Act

Non-compliance carries some of the steepest data-protection penalties in the region.

₹250 cr

Security failures

Failure to take reasonable security safeguards to prevent a personal data breach.

₹200 cr

Breach & children's data

Failure to notify a breach, or to meet children's-data obligations.

₹150 cr

SDF obligations

Failure by a Significant Data Fiduciary to meet its additional obligations.

Indicative maximums per the DPDP Act schedule. Actual penalties are determined by the Data Protection Board.

Privana ProDPDP compliance platform by KS-Cybervise

A complete platform to achieve and sustain DPDP compliance

Privana Pro combines automation, expert-built playbooks and continuous monitoring so you can meet every DPDP obligation without stalling your business. One platform, from data discovery to the Board notification clock.

9–12mo

Programme compressed

Unified platform

24/7

Continuous monitoring

Discover & map

Automatically locate personal data across systems and auto-build your Record of Processing Activities.

Automate consent

Deploy compliant consent notices, capture and withdrawal, and orchestrate data-principal requests.

Detect & report

Real-time breach detection and guided reporting aligned to the Board notification timeline.

Why Privana Pro

Built for DPDP, backed by KS-Cybervise

Not a generic checklist tool — a compliance engine tuned to India's DPDP Act and run by security practitioners.

Compliant in weeks, not years

Pre-built DPDP workflows compress a 9–12 month programme into a guided, rapid rollout.

Always audit-ready

Live dashboards give you evidence for DPIAs and independent audits on demand.

One platform, every obligation

Consent, rights, RoPA, breach response and children's data — unified, not stitched together.

Experts on tap

KS-Cybervise privacy specialists guide implementation and stand beside you at audit time.

How it works

Your path to DPDP compliance

Assess

Discover data flows and benchmark against every DPDP obligation.

Implement

Deploy consent, rights and breach workflows with Privana Pro.

Monitor

Track posture live and get alerted the moment something drifts.

Prove

Generate audit-ready evidence for the Board, DPIAs and customers.

Get DPDP-ready with Privana Pro

Tell us about your data and deadlines. Our team will show you exactly how Privana Pro closes your gaps before 13 May 2027.

Sentinel

AI Security Advisor · online

General guidance only — for your specific environment, request a briefing.