The five gazette instruments
Everything in force comes from these five. Two clocks run through them: G.S.R. 843(E) stages the Act's sections and Rule 1 stages the Rules. They tick on the same dates and are constantly confused for one another.
- G.S.R. 843(E)
Commencement of the DPDP Act 2023
Stages the Act's own sections. This is the clock for every Act section on this site — never Rule 1.
Download the gazette PDF → - G.S.R. 844(E)
Establishment of the Data Protection Board of India
Establishes the Board, with its headquarters in the National Capital Region. The Board exists; it has no chairperson yet, so no enforcement has begun.
Download the gazette PDF → - G.S.R. 845(E)
Composition of the Board — four members
Fixes the Board at four members.
Download the gazette PDF → - G.S.R. 846(E)
The Digital Personal Data Protection Rules 2025
The Rules themselves, with the seven Schedules. Rule 1 stages them.
Download the gazette PDF → - G.S.R. 892(E)
Corrigendum to the Rules
Typographical only, verified line by line. Rule 1(3) and 1(4) read "in the Official Gazette" rather than "of this Gazette", with the dates unchanged; Rule 23 gains the word "order"; and the Fourth Schedule definitions are re-lettered (a)–(g) because two clauses were both lettered (a). No substantive change.
Download the gazette PDF →