The commencement notification and final Rules use publication-date, one-year and eighteen-month cohorts. This page keeps those legal-source states separate from implementation readiness.
01
in force
In force now
Selected definitions, institutional machinery and rule-making provisions are operative. Most day-to-day Data Fiduciary duties mapped in this workspace sit in a later cohort.
Consent Manager registration machinery and one Board function are notified for this cohort. A normal organisation's ecosystem preparation is still an implementation aid, not a certification step.
Act scope
Act section 6(9) and section 27(1)(d)
Rules scope
Rule 4
Calculation basis: One year after Gazette publication on 13 November 2025.
The substantive provisions used by most readiness controls—including notice, safeguards, rights, retention, children and breach workflows—are notified for this later cohort.
Act scope
Act sections 3–5, section 6(1)–(8), (10), sections 7–17, most of section 27, sections 28–34, 36, 37 and section 44(2)
Rules scope
Rules 3, 5–16, 22 and 23
Calculation basis: Eighteen months after Gazette publication on 13 November 2025.