28 September 2026
India’s digital data protection framework has entered a new phase in 2026. Following the notification of the Digital Personal Data Protection Rules, 2025, the implementation of the DPDP Act, 2023 is moving from legislative framework to active compliance.
This publication examines the key developments shaping India’s data protection landscape in 2026, including the phased rollout of the DPDP Rules, the constitution and role of the Data Protection Board of India, evolving breach-reporting obligations, judicial developments concerning the right to be forgotten, and the continuing questions surrounding cross-border data transfers and enforcement readiness.
As businesses begin navigating the new compliance timelines, the publication looks at the practical and legal issues that will shape data protection in India in the months ahead.
