India DPDPA Rollout 2025-2027
Tags: Regulatory
TL;DR
- India’s Digital Personal Data Protection Act was notified in Nov 2025 and will phase in through 2027.
- Awareness is already high relative to many domains, reflecting market momentum and urgency.
Why it matters for HK marketers: India-facing campaigns must adapt consent, notices, and data sharing ahead of phased enforcement to protect pipeline and performance.
Status and timing
- Phased rollout: Core provisions on consent and privacy notices were not yet in force at the time of study; staged enforcement runs to 2027.
- Market signal: Rapid awareness growth indicates brands and partners are mobilising before full enforcement.
Commercial context
- E-commerce acceleration: Regulatory awareness is tracking opportunity—online retail is <8% of total retail but growing 27% YoY, with e-commerce regulation awareness at 47%.
44% awareness of India’s DPDPA among industry respondents.
Online retail <8% of total retail; 27% YoY growth.
So what for marketers
Audit consent, notices, and data transfers for India now; prioritise e-commerce pathways, and stage rollout plans in line with DPDPA phases to de-risk Q4–Q1 launches.
← Back to Knowledge Base