DPDP Act core obligations take full effect
What’s happening
Notice, consent, security safeguards, breach reporting to the Data Protection Board and affected people, retention and erasure, and data-subject rights become enforceable, covering employee and candidate data as well as customer data.
What to do
Finish employee-data mapping, privacy notices, breach procedures and vendor contracts (including wellbeing and health-check providers) before May 13, 2027.
Source
networkintelligence.ai. Checked October 19, 2026.