Partners: Rahul Matthan, Nikhil Narendran, Jyotsna Jayaram, Jaideep Reddy, Jishnu Sanyal; Counsel: Thomas J. Vallianeth; Senior Associates: Anjana Ravi, Madhav Tampi, Akshaya Parthasarathy, Kuruvila Jacob, Prabal De, Sanah Javed, Janak Pradhan; Associates: Muskaan Wadhwa, Amala G., Yashaswini Hareesh, Divya Govindan, Afifa Sultan, Radhika Sikri, Adithi Holla
On 13 November 2025, the Ministry of Electronics and Information Technology (MeitY) notified the implementation timelines for the Digital Personal Data Protection Act, 2023 (DPDPA) and published the final version of the Digital Personal Data Protection Rules, 2025 (Rules).
Together, the DPDPA and the Rules set out the framework that applies to the processing of all types of personal data. It will impact all businesses that process personal data regardless of their privacy footprint. Within an organisation, it will apply to the breadth of a business’ internal and external processes, such as HR, marketing and sales, R&D, procurement, and accounting.
The DPDPA has been notified in a staggered manner – with organisations being given an extended timeline to evaluate their systems and align with the substantive provisions of the law.
Under the rules of the Bar Council of India, Trilegal is prohibited from soliciting work or advertising in any form or manner. By accessing this website, www.trilegal.com, you acknowledge that:
We prioritize your privacy. Before proceeding, we encourage you to read our privacy policy, which outlines the below, and terms of use to understand how we handle your data:
For more information, please read our terms of use and our privacy policy.