Originally published on AI Tech Connect.
Where India actually is on DPDP, today The Digital Personal Data Protection Act and the Digital Personal Data Protection Rules, 2025 were notified by the Ministry of Electronics and Information Technology on 13 November 2025. That single date set in motion a three-phase rollout that ends in May 2027. As of late May 2026, we are squarely in the middle. Here is the timeline, stripped of jargon: Phase I — 13 November 2025 (done). The provisions that stand up the Data Protection Board of India became effective the day the Rules were notified. The Board exists, it is staffed, and it is the body that will adjudicate complaints and impose penalties. Phase II — 13 November 2026 (the six-month window). Consent Manager rules become effective, twelve months from notification. Significant Data…
