India's Digital Personal Data Protection Rules, notified in late 2025, are rolling out in phases. The Consent Manager framework becomes operational by 13 November 2026, with the remaining substantive obligations following by 13 May 2027. Penalties reach up to 250 crore rupees for failing to take reasonable security safeguards.