Table of Contents
- #1 Gazette Notification & Commencement Timelines
- #2 Rule 3 & Rule 4: Notice Details and Consent Manager Architecture
- #3 Rule 6 & Rule 7: Reasonable Safeguards & 72-Hour Breach Intimation
- #4 Rule 10 & Rule 13: Verifiable Child Consent & SDF Metrics
- #FAQ Frequently Asked Questions
- #KW Complete Keyword Index (49)
Gazette Notification & Commencement Timelines
MeitY's G.S.R. 843(E) sets forth staggered implementation timelines: 12 months for Consent Manager accreditation, 18 months for Significant Data Fiduciaries, and phased enforcement across enterprise digital properties.
Rule 3 & Rule 4: Notice Details and Consent Manager Architecture
Rule 3 requires itemised, granular notices specifying the exact categories of personal data, purpose description, and contact info of the Data Protection Officer or Grievance Officer. Rule 4 establishes net-worth and technical criteria for registered Consent Managers.
Rule 6 & Rule 7: Reasonable Safeguards & 72-Hour Breach Intimation
Rule 6 defines mandated security safeguards, including encryption-at-rest, access control, and 1-year log retention. Rule 7 requires intimate notification to the Data Protection Board and affected Data Principals within 72 hours of detecting a breach.
Rule 10 & Rule 13: Verifiable Child Consent & SDF Metrics
Rule 10 outlines accepted technological methods for verifiable parental consent (DigiLocker, tokenized Aadhaar KYC), while Rule 13 prescribes data volume thresholds for SDF classification.
Frequently Asked Questions
Complete Search Keywords for Subordinate Legislation
Showing all 49 targeted phrases covered in this domain.
DPDP Knowledge Network Directory
Explore our other specialized legal and technical cluster pages across the Digital Personal Data Protection Act, 2023.
Core Compliance Hub
DPDP Compliance Platform & Comprehensive Data Protection Assurance India
Services & Metro Directory
DPDP Compliance Services, Audits & Legal Advisory Across India
Industry Vertical Guides
DPDP Compliance by Industry: Fintech, Healthcare, E-Commerce, SaaS & BFSI
Consent Architecture
DPDP Consent Management Platform (CMP) & 22 Scheduled Languages
Statutory Commentary
DPDP Act 2023 Section-by-Section Legal Commentary & Analysis
Legal Glossary
DPDP Act Statutory Definitions & Legal Glossary (Section 2)
AI & Emerging Tech
AI & LLM Governance Under DPDP Act: Compliance for Generative AI
Legal Knowledge Base
DPDP Act Frequently Asked Questions (FAQ) & Founder Inquiries
Document Toolkit
DPDP Compliance Templates, Policies Pack & Legal Drafts
Comparative Jurisprudence
DPDP vs GDPR, CCPA & Indian Data Laws: In-Depth Comparison
Subordinate Legislation
Digital Personal Data Protection Rules 2025: Analysis & Implementation
Individual Rights
Data Principal Rights Under DPDP Act: Access, Erasure & DSAR Portal
High-Impact Fiduciaries
Significant Data Fiduciary (SDF) Obligations, Resident DPO & DPIA
Professional Training
DPDP Training, Awareness Programs & DPO Certification India
Incident Response
DPDP Data Breach Notification, 72-Hour Intimation & Security Rules
Regulator & Adjudication
Data Protection Board of India: Powers, Inquiries & TDSAT Appeals
Cross-Border & Minor Protection
Children's Personal Data & Cross-Border Data Transfer Rules