Independent DPDP educationBrowser-only workspace · no accounts, analytics or submissions

01 Provision-status ledger · as at 2026-08-30

Notified does not always mean operative today.

The commencement notification and final Rules use publication-date, one-year and eighteen-month cohorts. This page keeps those legal-source states separate from implementation readiness.

01

in force

In force now

Selected definitions, institutional machinery and rule-making provisions are operative. Most day-to-day Data Fiduciary duties mapped in this workspace sit in a later cohort.

Act scope

Act section 1(2), section 2, sections 18–26, 35, 38–43 and section 44(1), (3)

Rules scope

Rules 1, 2 and 17–21

Calculation basis: Date of publication in the Official Gazette.

02

notified future commencement

Notified for the one-year cohort

Consent Manager registration machinery and one Board function are notified for this cohort. A normal organisation's ecosystem preparation is still an implementation aid, not a certification step.

Act scope

Act section 6(9) and section 27(1)(d)

Rules scope

Rule 4

Calculation basis: One year after Gazette publication on 13 November 2025.

03

notified future commencement

Notified for the eighteen-month cohort

The substantive provisions used by most readiness controls—including notice, safeguards, rights, retention, children and breach workflows—are notified for this later cohort.

Act scope

Act sections 3–5, section 6(1)–(8), (10), sections 7–17, most of section 27, sections 28–34, 36, 37 and section 44(2)

Rules scope

Rules 3, 5–16, 22 and 23

Calculation basis: Eighteen months after Gazette publication on 13 November 2025.

02 Read the clock precisely

Rule 7 is not one blanket “72-hour deadline”.

Rule 7 is in the eighteen-month cohort, notified for 13 May 2027. The operating design should distinguish three actions after awareness.

  1. 01
    Affected Data Principals

    Tell each affected person without delay, with the specified content, based on the best knowledge available.

    without delay
  2. 02
    Board · initial description

    Give an initial description without delay, including nature, extent, timing, location and likely impact.

    without delay
  3. 03
    Board · updated detail

    Provide the specified updated and detailed information within 72 hours after awareness, unless the Board allows longer on written request.

    within 72 hours*

*This is a compact editorial summary of Rule 7(1)–(2), not a substitute for the official text or incident-specific legal advice.

Do

Use status to sequence preparation.

Map work to the provision and keep a dated source check alongside the implementation record.

Do not

Turn a future date into a guarantee.

Later notifications, corrections or fact-specific legal questions still need to be checked.

Recheck

Before public reliance.

This preview editorial record has not been reviewed by counsel. Recheck the Gazette and obtain qualified advice.