High ImpactData Privacy

Digital Personal Data Protection (DPDP) Act: Compliance Deadline for Foreign Entities

The Ministry of Electronics and Information Technology (MeitY) has notified rules under the DPDP Act 2023, requiring all data fiduciaries — including foreign companies processing Indian citizens' data — to appoint a Data Protection Officer and implement consent frameworks.

Published: April 10, 2026Effective: June 30, 2026

The Ministry of Electronics and Information Technology (MeitY) has notified rules under the Digital Personal Data Protection Act 2023.


Key Requirements:


1. Data Protection Officer: All significant data fiduciaries must appoint a DPO.

2. Consent Framework: Implement clear, specific, and informed consent mechanisms.

3. Data Protection Board Registration: Register with the Data Protection Board of India by June 30, 2026.

**Compliance Deadline**: June 30, 2026


Action Items:


  • Conduct data mapping exercise
  • Appoint Data Protection Officer
  • Update privacy policies and consent mechanisms
  • Register with Data Protection Board of India
  • Need Compliance Guidance?

    Our regulatory experts can help you navigate these changes and ensure full compliance.

    Schedule a Consultation