What are the key DPDP Act 2023 compliance deadlines? The DPDP Act 2023 received Presidential assent on 11 August 2023, with most provisions yet to be notified. The Data Protection Rules 2025 were published for public consultation and enforcement is expected to begin by May 2027. Key milestones for organisations include appointing a Grievance Officer (immediately), publishing a compliant Privacy Notice (immediately), conducting a data inventory and gap assessment (within 3 months), and achieving full compliance with consent and data principal rights obligations before the enforcement date.
Every deadline that matters, a quarter-by-quarter action plan, and a one-click calendar file so the dates sit in your Outlook — not in a forgotten PDF.
Works with Google Calendar, Outlook and Apple Calendar. Free, no email needed.
What has happened, and what is coming.
India's first comprehensive data protection law is on the books.
The compliance clock starts: Data Protection Board constituted, consent-manager registration framework defined, 18-month runway begins.
Notices, consent flows, security baseline (Rule 6), grievance mechanism, vendor contracts, retention schedules and training all need to be designed, approved and rolled out in this window.
Registered Consent Managers go live. Fiduciaries must be able to honour consents given, managed and withdrawn through them — integration work that needs to start well before this date.
Notice, consent, Data Principal rights, 72-hour breach reporting and erasure duties are all enforceable. Penalties up to ₹250 crore per category are live. The Data Protection Board begins acting on complaints.
Working back from May 2027, this is the sane sequencing for a mid-size organisation.
Tell us your sector and size — we'll send a tailored quarter-by-quarter DPDP plan with effort estimates, plus our monthly deadline reminders so nothing slips.
One real DPDP development explained in plain English, one practical how-to, one number from our own assessment data. Nothing else — no daily noise, no sales pitch.
No spam. Unsubscribe with one click, anytime.