Despite the DPDP Act, 2023 receiving Presidential assent and gazette publication two years ago, it has not yet been enacted. Final rules were released in January 2025, but a formal notification is still pending—leaving India without an active digital privacy framework. The delay affects businesses, consumers, and legal clarity around personal data protection in the digital economy.
As governments worldwide move to enforce data protection, India’s lag could invite regulatory uncertainty and compliance challenges. Activists and industry leaders are urging swift implementation to ensure protections align with global norms and bolster trust in digital services.
