Your go-to hub for Expert Insights,
Publications, and Resources
on
data privacy and compliance

Our resources provide the essential tools, guides, and insights to help your business stay ahead of data privacy regulations. From practical templates to expert articles, we ensure you have everything you need to navigate compliance with confidence.

Last Updated: 2025-09-18 ~ DPDP Consultants

DPDP Rules to Be Published by September 28, Confirms Ashwini Vaishnaw

DPDP Rules to Be Published by September 28, Confirms Ashwini Vaishnaw

In a major step in India’s evolving data policy framework, Information Technology Minister Ashwini Vaishnaw has announced that the rules under the Digital Personal Data Protection (DPDP) Act have been finalised and are slated for publication by September 28, 2025. The announcement was made during a pre-event of the AI Impact Summit.

According to Minister Vaishnaw, the rules have been crafted after an exhaustive process of public and institutional consultation. Stakeholders from various sectors including civil society, industry, and legal experts were involved in reviewing multiple drafts to ensure balance between data protection, innovation, and ease of compliance.

The impending publication of the DPDP rules is expected to pave the way for formal implementation of the Act, which was enacted earlier but has been awaiting detailed regulation. The rules are intended to lay out operational protocols for collection, storage, processing, and sharing of personal data; define obligations of entities handling such data; and establish enforcement mechanisms for violations.

Observers believe the rules will address long-standing concerns about data privacy, user consent mechanisms, rights of individuals to access and erase their information, and cross-border data flows. Once in force, regulatory oversight and penalties for non-compliance will also become more defined.

Minister Vaishnaw’s confirmation of the September 28 deadline underscores the government’s commitment to institutionalising data protection in a rapidly digitising economy. As artificial intelligence, machine learning, and big data applications expand, the DPDP regulatory framework is expected to offer clarity and legal certainty to businesses, citizens, and technology innovators alike.

The coming days leading up to the publication are likely to see scrutiny of the final rulebook, with particular attention to how India balances fundamental privacy rights with the need to foster technological growth. For many, this milestone marks a turning point in data governance in India. The rules, once notified, will formally shift from legislative promise to actionable policy.

Similar Read