A New Era of Data Governance Under the Digital Personal Data Protection Act 2023 and Newly Notified 2025 Rules

On 13 November 2025, the Government of India officially notified the Digital Personal Data Protection Rules, 2025, signalling the full operationalisation of the DPDP Act, 2023. With this notification, the law moves from a policy framework to an enforceable compliance regime, activating several obligations immediately while assigning phased timelines for others over the next 12 to 18 months. For businesses processing personal data in India,…