DPDP Act 2023 · Miscellaneous

Section 40: Power to make Rules

What Section 40 says, in plain English

The Central Government may make Rules. Rules were notified on 14 November 2025 as the DPDP Rules 2025.

What it means for you

The Rules are the operational detail. Read Rule 3 (notice), Rule 6 (security), Rule 7 (breach), Rule 8 (retention), Rule 11 (children), Rule 12 (SDF DPIA + algorithmic diligence), Rule 14 (DSR).

Other sections in Miscellaneous

Section 38: Consistency with other laws Section 39: Protection of action taken in good faith Section 41: Power to make Regulations Section 42: Laying of Rules and Regulations Section 43: Power to remove difficulties Section 44: Repeal, amendment and savings

Also useful

All 44 sections DPDP vs GDPR Scan your site Ask a DPO (free)

← Section 39: Protection of action taken in good faith All sections Section 41: Power to make Regulations →