DPDP Act 2023
Draft DPDP Rules 2025
Final DPDP Rules 2025
Ministry of Law and Justice

Chapter 1 – Preliminary (DPDP Act 2023)

Chapter 2 – Obligations of Data Fiduciary

Chapter 3 – Rights and Duties of Data Principal

Chapter 4 – Special Provisions

Chapter 5 – Data Protection Board of India

Chapter 6 – Powers & Procedures of the Board

Chapter 7 – Appeals & Alternate Dispute Resolution

Chapter 8 – Penalties & Adjudication

Chapter 9 – Miscellaneous

Schedule – DPDP Act 2023

Rule 1 – DPDP Draft Rule 1

Rule 2 – DPDP Draft Rule 2

Rule 3 – DPDP Draft Rule 3

Rule 4 – DPDP Draft Rule 4

Rule 5 – DPDP Draft Rule 5

Rule 6 – DPDP Draft Rule 6

Rule 7 – DPDP Draft Rule 7

Rule 8 – DPDP Draft Rule 8

Rule 9 – DPDP Draft Rule 9

Rule 10 – DPDP Draft Rule 10

Rule 11 – DPDP Draft Rule 11

Rule 12 – DPDP Draft Rule 12

Rule 13 – DPDP Draft Rule 13

Rule 14 – DPDP Draft Rule 14

Rule 15 – DPDP Draft Rule 15

Rule 16 – DPDP Draft Rule 16

Rule 17 – DPDP Draft Rule 17

Rule 18 – DPDP Draft Rule 18

Rule 19 – DPDP Draft Rule 19

Rule 20 – DPDP Draft Rule 20

Rule 21 – DPDP Draft Rule 21

Rule 22 – DPDP Draft Rule 22

Conditions for Registration of Consent Manager

Schedule Second – DPDP Draft Rules

Schedule Third – DPDP Draft Rules

Schedule Fourth – DPDP Draft Rules

Schedule Fifth – DPDP Draft Rules

Schedule Sixth – DPDP Draft Rules

Schedule Seventh – DPDP Draft Rules

DPDP Final Rule 1

DPDP Final Rule 2

DPDP Final Rule 3

DPDP Final Rule 4

DPDP Final Rule 5

DPDP Final Rule 6

DPDP Final Rule 7

DPDP Final Rule 8

DPDP Final Rule 9

DPDP Final Rule 10

DPDP Final Rule 11

DPDP Final Rule 12

DPDP Final Rule 13

DPDP Final Rule 14

DPDP Final Rule 15

DPDP Final Rule 16

DPDP Final Rule 17

DPDP Final Rule 18

DPDP Final Rule 19

DPDP Final Rule 20

DPDP Final Rule 21

DPDP Final Rule 22

DPDP Final Rule 23

First Schedule – DPDP Final Rules

Second Schedule – DPDP Final Rules

Third Schedule – DPDP Final Rules

Fourth Schedule – DPDP Final Rules

Fifth Schedule – DPDP Final Rules

Sixth Schedule – DPDP Final Rules

Seventh Schedule – DPDP Final Rules

Home Draft DPDP Rules Schedule Third

[See rule 8(1)]

Schedule Third

S.No Ita came to walk Purpose Deadline
1 2 3 4
1 Data Trust, an e-commerce entity having There are at least two Crore Registered Users Are For all purposes, except the following:
  • (a) The data owner shall be entitled to his User access to the feed to enable; and
  • (b) the data owner shall have the right to Access to Virtual Token Enabling the Data Trustee issued by or on behalf of to be appointed, such data trustee digital facility of stored on the platform, and can be used to obtain money, goods or services This can be done for
three from that date year, when the data owner has specified objective of Prishun or your exercise of rights to the Data Trustee for last time contact was done, or digitally personal ÿÿÿÿ From the commencement of the Protection of Children Rules, 2025, which may also be in the future.
2 Data Trustee who is a Online gaming middle school of which there are fifty in India Registered less than lakh are not user For all purposes, except the following:
  • (a) The data owner shall be entitled to his User access to the feed to enable; and
  • (b) the data owner shall have the right to Access to Virtual Token Enabling the Data Trustee issued by or on behalf of to be appointed, such data trustee digital facility of stored on the platform, and can be used to obtain money, goods or services can be done for
three from that date year, when the data owner has specified objective of Prishun or your exercise of rights to the Data Trustee for last time contact was done, or digitally personal ÿÿÿÿ From the commencement of the Protection of Children Rules, 2025, which may also be in the future.
3 Data Trustee who is a social Media is the middle man which has at least one presence in India There are less than two crore registered users for all purposes, except as follows:
  • (a) enabling the Data Owner to access its User Accounts; and
  • (b) enabling the Data Owner to access any virtual tokens that may be created for the Data Issued by or on behalf of a trustee, such data is stored on the trustee’s digital facility or platform, and can be used to obtain money, goods or services
 three from that date years, when the data owner has performed the performance or his/her own exercise of rights to the Data Trustee for last time contact or digital personal ÿÿÿÿ Until the commencement of the Protection of Children from Sexual Offences (POCSO) Rules, 2025, whichever is later.

Note: In this Schedule,—

  • (a) “e-commerce entity” means any person who owns, operates or manages a digital facility or platform for e commerce as defined in the Consumer Protection Act, 2019 (35 of 2019), but does not include a seller who offers its goods or services for sale in the market of an e-commerce entity as defined in the said Act;
  • (b) “online gaming intermediary” means any intermediary who enables the users of its computer resources to access one or more online games;
  • (c) “social media intermediary” means any intermediary as defined in the Information Technology Act, 2000 (21 of 2000) that primarily or entirely enables online interaction between two or more users and allows them to create, upload, share, disseminate, modify or access information using its services; and
  • (d) “user”, in relation to—
    • (i) an e-commerce entity, means any person who accesses or uses any computer resources of an e-commerce entity; and
    • (ii) an online gaming intermediary or social media intermediary means any person who accesses or uses any computer resources of the intermediary for the purpose of hosting,

publishing, sharing, transacting,

viewing, displaying, downloading or uploading information

Prev Next