Key takeaways The DPDP Rules 2025 were notified on 13 November 2025 by MeitY. The Data Protection Board of India is now constituted. The substantive obligations come into force on 13 May 2027 — every Indian mobile app and every foreign app serving Indian users has 18 months to comply. The maximum penalty is ₹250 crore per violation for failure to...