Compliance Resource
Mapping of DPDP Rules
This resource provides a direct mapping between the statutory Sections of the DPDPA 2023 and the corresponding procedural rules published in the DPDP Rules. Use this matrix to understand exactly how each section is implemented.
| DPDPA Section | Section Title | DPDP Rule | Rule Description |
|---|---|---|---|
| Section 5 | Notice | Rule 3 & 4 | Form and manner of Notice, multi-lingual notice requirements. |
| Section 6 | Consent | Rule 5 | Consent Manager registration and technical frameworks. |
| Section 8(6) | Data Breach Notification | Rule 9 | Form, manner, and timeline for notifying the Board and Data Principal. |
| Section 9 | Data of Children | Rule 11 | Verifiable parental consent mechanisms. |
| Section 10 | Significant Data Fiduciary (SDF) | Rule 14 | Criteria for SDF classification, Data Auditor appointment. |
Note on DPDP Rules
This mapping is based on the latest iteration of the Digital Personal Data Protection Rules. As new rules are notified by the Central Government under Section 40, this mapping matrix will be updated.