ICN — Integrated Cyber Nexus CYBER CIBIL

Understand the Act

The DPDP Act, explained like a colleague would

Twelve clickable explainers covering who the Act reaches, what it demands, and what happens when things go wrong. Legal terms are explained on first use; every claim carries its official source and its commencement status.

Last verified 25 September 2026 Phased commencement — see timeline
How to read this page: click any explainer to open it. Except where marked otherwise, the duties described here are scheduled to commence on 13 May 2027. This page is general information, not legal advice.

When does all this apply?

The commencement is phased — machinery is live, Consent Managers come in November 2026, and the main duties land on 13 May 2027.

See the timeline

What if it goes wrong?

Penalties are set by violation category, decided by the Board after an inquiry — never automatic, never sector-rated.

Explore penalties

Ready to act on it?

Turn understanding into a plan: five readiness steps and a self-assessment that yields a practical checklist.

Start the journey