DPDP privacy contact publication
A Data Fiduciary publishes contact details for a DPO, where required, or another person who can answer processing questions.
Standing duty, no filing date
- e-Gazette
- Exchanges and other
- Not specified
- 2026-09-01
This duty starts on 13 May 2027. Publish the business contact details of the DPO, if one is required, or another person who can answer questions about personal-data processing. A DPO is mandatory only if the Central Government has notified the entity or its class as a Significant Data Fiduciary.
An ordinary Data Fiduciary does not have a general DPO duty. The Consent Manager stage starts on 2026-11-13 and does not change that position. The contact-publication rule starts on 2027-05-13; no Significant Data Fiduciary notification existed at the sweep date.
Deadlines counted from an event
Publish the contact details on the website or app and in every consent notice from 13 May 2027.
The rule
Publish the contact details on the website or app and in every consent notice from 13 May 2027.
Who must comply
- Every listed company acting as a Data Fiduciary, for a person who can answer processing questions
- Only an entity or class notified as a Significant Data Fiduciary, for the DPO requirement
Statutory basis
- DPDP Act, 2023, section 8(9)
- DPDP Act, 2023, section 10(2)(a)
- DPDP Rules, 2025, rule 9
- DPDP Act commencement notification G.S.R. 843(E)
- Digital Personal Data Protection Rules, 2025, rule 1(3), Consent Manager stage only
- Digital Personal Data Protection Rules, 2025, rule 1(4), substantive Data Fiduciary stage