{
  "node_id": "in-dpdp-rules-2025-gsr-846e",
  "title": "India Digital Personal Data Protection Rules 2025 - MeitY Gazette G.S.R. 846(E) of 13 November 2025",
  "domain": "Data Protection & Privacy",
  "version": "1.0.0",
  "last_updated": "2026-06-04",
  "bluf": "Data Fiduciaries in India must implement the Digital Personal Data Protection Rules, 2025, notified by MeitY via Gazette Notification G.S.R. 846(E) on 13 November 2025, in a phased manner over 18 months culminating on 14 May 2027: Phase 1 procedural provisions from 14 November 2025, Phase 2 consent manager registration and Data Protection Board breach inquiry powers from 14 November 2026, and Phase 3 substantive obligations including consent, notices, data principal rights, processing of children's personal data, breach intimation (Rule 7), retention and deletion (Rule 8), and publication of Data Protection Officer contact details (Rule 9) from 14 May 2027, with additional obligations on Significant Data Fiduciaries including localisation of personal data and traffic data flows where identified by the Central Government, and algorithmic due diligence.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "ai_overlay_2026"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "in-dpdp-act-2023-digital-personal-data-protection"
  ],
  "primary_citations_count": 9
}