The Digital Personal Data Protection (DPDP) Rules, 2025 have been officially published, marking the start of an 18-month compliance countdown that will transform how every Indian business handles data.

      This is not just another regulatory update - it's a complete operational overhaul that impacts everything from your customer onboarding processes to your data storage architecture. The rules introduce specific mandates on consent managers, data erasure timelines, breach reporting protocols, and hyper-detailed notice requirements that leave no room for interpretation.

      In this one hour power session, we cut through the legal complexity to deliver a strategic business briefing. We will translate the 23-page rulebook into actionable insights you can implement immediately.

      What you will learn

      The compliance clock explained

      Phased implementation timeline
      (rule 1)

      Why the 18-month window is tighter than it appears

      Immediate vs. Long-term requirements


      Critical rule changes that demand action

      work

      Consent managers
      (rule 4)

      The new ecosystem for user consent

      delete

      Data erasure mandates
      (rule 8)

      Specific retention periods for different business types

      watch_later

      Breach reporting
      (rule 7)

      The 72-hour detailed reporting window

      assignment

      Notice requirements
      (rule 3)

      Itemized data collection and plain language mandates

      Your 100-day action plan

      How to conduct a rapid gap analysis

      Budgeting for compliance transformation

      Identifying quick wins vs. Long-term projects



      Speaker

      Shikha Kamboj
      Shikha Kamboj

      Partner, Digital Trust, Data Privacy and Ethics

      KPMG in India

      Our insights

      DPDP rules serve as a strategic lever to elevate trust, accountability, and innovation in the digital economy

      The Government of India recently published the much-anticipated draft Digital Personal Data Protection Rules

      Delving into the details of various target areas of Draft DPDP rules 2025

      How can KPMG in India help

      KPMG in India’s Data Privacy advisory service endeavors to assist organisations in evaluating and remediating their exposure to privacy risks

      Use cyber security to protect your future

      New technologies. Sales channels. Customer experiences. Does your organisation have the confidence and agility to seize these kinds of opportunities, or are cyber threats holding you back?

      Access our latest insights on Apple or Android devices