Policy · Updated 25 Oct, 05:08 pm IST
India’s DPDP Act sets staged compliance deadlines for healthcare data protections

Why it matters for readers: It explains when new privacy protections kick in and why hospitals will need better systems and trained staff.
- The DPDP Act 2023 contains 44 sections in nine chapters plus one Schedule.1
- The government notified the Rules on November 13, 2025.1
- Provisions for consent managers will take effect from November 13, 2026.1
- All other substantive obligations under the Act begin to apply from May 13, 2027.1
- The Act treats the patient as the data principal and distinguishes clinical consent from data consent, while permitting data processing in emergencies and certain medico-legal or public-health situations.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started