Originally published on AI Tech Connect.
What changed and why builders should care The Ministry of Electronics and Information Technology notified the Digital Personal Data Protection Rules on 14 November 2025, more than two years after the parent Act was passed. That single notification started three different clocks running. A handful of rules took effect immediately — most importantly the constitution of the Data Protection Board of India, the regulator that will actually issue penalties. Rule 4, governing Consent Managers, takes effect twelve months later on 13 November 2026. Everything else — the substantive duties around notice, security, breach reporting, data principal rights and the special obligations of Significant Data Fiduciaries — becomes enforceable eighteen months from notification, on 13 May 2027. For AI teams…
Top comments (0)