The DPDP Rules to know before a consumer survey
Some rules apply immediately and the main obligations phase in over 12–18 months. Data fiduciaries must apply security measures, notify breaches, observe retention limits and give erasure notice; penalties reach ₹250 crore per breach.
- Consent manager registration falls in the 12–18 month window
- Document respondent consent, purpose and retention period