[{"data":1,"prerenderedAt":297},["ShallowReactive",2],{"dpdp-\u002Fdpdp-act\u002Ftimeline-deadlines":3},{"id":4,"title":5,"author":6,"body":7,"category":264,"date":265,"description":266,"draft":267,"extension":268,"eyebrow":264,"faq":269,"h1":276,"keywords":277,"meta":281,"navigation":282,"ogTitle":283,"path":284,"readingTime":285,"relatedArticles":286,"relatedServices":289,"seo":292,"stem":293,"tags":294,"updated":295,"__hash__":296},"dpdp\u002Fdpdp-act\u002Ftimeline-deadlines.md","DPDP Compliance Deadlines & Timeline","DreamyHook Consultancy Services",{"type":8,"value":9,"toc":251},"minimark",[10,19,44,49,54,65,69,79,83,100,104,167,171,178,181,205,209,239,246],[11,12,13,14,18],"p",{},"The DPDP Act doesn't switch on all at once. It rolls out in ",[15,16,17],"strong",{},"phases",", giving organizations a transition period to get ready. This guide lays out the timeline and the key dates — and why starting early is the only sensible strategy.",[20,21,22],"blockquote",{},[11,23,24,27,28,31,32,35,36,39,40,43],{},[15,25,26],{},"Accuracy note (dated):"," Dates below reflect the phased rollout as understood in ",[15,29,30],{},"May 2026",". The headline date for full compliance is ",[15,33,34],{},"13 May 2027",". In ",[15,37,38],{},"January 2026"," there was public discussion of compressing the transition window (from 18 months to 12). That was ",[15,41,42],{},"proposed and unconfirmed"," at the time of writing — we'll update this page if it's formalized. Always confirm against the official notifications.",[45,46,48],"h2",{"id":47},"the-phased-rollout","The phased rollout",[50,51,53],"h3",{"id":52},"phase-1-foundations-from-notification-late-2025","Phase 1 — Foundations (from notification, late 2025)",[11,55,56,57,60,61,64],{},"The provisions needed to stand up the regime commence first: establishing the ",[15,58,59],{},"Data Protection Board of India",", and the framework for ",[15,62,63],{},"Consent Manager"," registration. This is the machinery, not yet the obligations on your business.",[50,66,68],{"id":67},"phase-2-build-period-2026","Phase 2 — Build period (~2026)",[11,70,71,72,74,75,78],{},"The transition window where organizations are expected to get ready: mapping data, fixing consent, building rights workflows, and putting security and retention in place. The ",[15,73,63],{}," framework is expected to become operational during this period (around ",[15,76,77],{},"November 2026",").",[50,80,82],{"id":81},"phase-3-full-compliance-13-may-2027","Phase 3 — Full compliance (13 May 2027)",[11,84,85,86,89,90,93,94,99],{},"The core obligations on Data Fiduciaries become ",[15,87,88],{},"enforceable",". From this date, the Data Protection Board can act on non-compliance, including the penalties of up to ",[15,91,92],{},"₹250 crore",". See ",[95,96,98],"a",{"href":97},"\u002Fdpdp-act\u002Fpenalties","Penalties & Enforcement",".",[45,101,103],{"id":102},"the-dates-at-a-glance","The dates at a glance",[105,106,107,120],"table",{},[108,109,110],"thead",{},[111,112,113,117],"tr",{},[114,115,116],"th",{},"When",[114,118,119],{},"What",[121,122,123,132,140,148,156],"tbody",{},[111,124,125,129],{},[126,127,128],"td",{},"11 August 2023",[126,130,131],{},"DPDP Act received Presidential assent",[111,133,134,137],{},[126,135,136],{},"January 2025",[126,138,139],{},"Draft DPDP Rules released for consultation",[111,141,142,145],{},[126,143,144],{},"Late 2025",[126,146,147],{},"Phased notification begins; Board & Consent Manager framework commence",[111,149,150,153],{},[126,151,152],{},"~November 2026",[126,154,155],{},"Consent Manager framework expected operational",[111,157,158,162],{},[126,159,160],{},[15,161,34],{},[126,163,164],{},[15,165,166],{},"Core compliance obligations enforceable",[45,168,170],{"id":169},"why-we-have-until-2027-is-the-wrong-way-to-think","Why \"we have until 2027\" is the wrong way to think",[11,172,173,174,177],{},"Eighteen months sounds like plenty. It isn't, because compliance is ",[15,175,176],{},"sequential",": you can't build consent flows before you've mapped your data, you can't automate erasure before retention rules exist, and you can't prove security without controls in place. Each stage depends on the last.",[11,179,180],{},"The organizations that struggle are the ones that wait. The earlier you start:",[182,183,184,192,198],"ul",{},[185,186,187,188,191],"li",{},"the ",[15,189,190],{},"cheaper"," it is (no rushed, premium-priced scramble),",[185,193,187,194,197],{},[15,195,196],{},"calmer"," it is (no firefighting against a hard date),",[185,199,200,201,204],{},"and the ",[15,202,203],{},"stronger"," your position if the timeline accelerates.",[45,206,208],{"id":207},"what-to-do-now","What to do now",[210,211,212,222,228],"ol",{},[185,213,214,217,218,99],{},[15,215,216],{},"Baseline today"," with a ",[95,219,221],{"href":220},"\u002Fservices\u002Freadiness-audit","readiness audit",[185,223,224,227],{},[15,225,226],{},"Sequence the work"," to the timeline — deadline-critical items first.",[185,229,230,233,234,238],{},[15,231,232],{},"Keep watching"," the Rules with ",[95,235,237],{"href":236},"\u002Fservices\u002Fmanaged-compliance","Managed Compliance",", so a change in dates never catches you out.",[11,240,241,242,99],{},"See where you stand in five minutes with the free ",[95,243,245],{"href":244},"\u002Fquick-scan","DPDP Quick Scan",[20,247,248],{},[11,249,250],{},"General information, not legal advice. Dates are subject to official notification.",{"title":252,"searchDepth":253,"depth":253,"links":254},"",3,[255,261,262,263],{"id":47,"depth":256,"text":48,"children":257},2,[258,259,260],{"id":52,"depth":253,"text":53},{"id":67,"depth":253,"text":68},{"id":81,"depth":253,"text":82},{"id":102,"depth":256,"text":103},{"id":169,"depth":256,"text":170},{"id":207,"depth":256,"text":208},"Timeline","2026-02-18","The DPDP Act compliance timeline explained — the phased rollout, the key dates, and the 13 May 2027 deadline for core obligations.",false,"md",[270,273],{"q":271,"a":272},"What is the main DPDP deadline?","Core obligations are set to become enforceable on 13 May 2027, following a phased rollout that began after the Rules were notified. Some provisions (like setting up the Board and Consent Manager registration) commence earlier.",{"q":274,"a":275},"Could the deadline change?","It's possible. In early 2026 there was discussion about accelerating the transition period. We treat 13 May 2027 as the working deadline and flag any change as it's confirmed — start early either way.","DPDP compliance deadlines & timeline",[278,279,280],"DPDP compliance deadline","DPDP Act timeline","DPDP 2027 deadline",{},true,null,"\u002Fdpdp-act\u002Ftimeline-deadlines","6 min read",[287,288],"\u002Fdpdp-act\u002Fdpdp-rules-2025","\u002Fdpdp-act\u002Fcompliance-checklist",[290,291],"readiness-audit","managed-compliance",{"title":5,"description":266},"dpdp-act\u002Ftimeline-deadlines",[],"2026-05-26","F_heL0vR6OvIUQvkrfFQNa_Tw6rmObHls8WYeTivNbM",1780230336006]