DPDP reference

Section 1: Short title and commencement

Last checked 6 Nov 2026

The law is called the Digital Personal Data Protection Act, 2023. It does not start on one day. The Central Government brings each provision into force by notification, and different dates may be set for different provisions.

A reference to the commencement of the Act in a provision means the day that provision came into force. The dates were set by G.S.R. 843(E) of 13 November 2025.

Applies to
Everyone reading the Act, since it decides when each duty starts.
Starts
s.1(2): 13 Nov 2025, in force (G.S.R. 843(E), item (a)).
Penalty
None of its own. This section sets out how the law works and places no duty on a business.
Source
Digital Personal Data Protection Act, 2023 (22 of 2023), section 1; G.S.R. 843(E), commencement

Questions

Is the whole DPDP Act in force?

No. G.S.R. 843(E) brings it into force in three stages: on publication on 13 Nov 2025, one year later for Consent Manager registration, and eighteen months later for nearly every duty on businesses.

Related

Next

Join early access

Not legal advice.