The DPDP deadline: what 13 May 2027 means and what to do now
Full enforcement of India's DPDP Act applies from 13 May 2027. The Act was enacted in 2023 and its Rules were notified in November 2025. From the enforcement date, the Data Protection Board of India can investigate breaches and impose penalties. Most products need several weeks of engineering work to be ready, so the time to start is now.
Why the deadline feels far but behaves close
The deadline reads as far away and behaves as if it is close. The reason is the volume of work hidden inside a product that was never built with the DPDP Rules in mind. Consent flows have to be rebuilt to a verifiable standard. A rights portal has to be wired to live data. Breach detection has to be instrumented. Retention schedules have to be written and automated. None of that is a same-week task.
The re-consent problem
There is also a re-consent problem most companies have not priced in. Consent collected under old sign-up forms, pre-ticked boxes, or bundled terms does not meet the new standard. You will need to collect fresh, verifiable consent from your existing user base, and that is a campaign in itself.
The Consent Manager deadline
A second date matters. Consent Manager registration is expected to open around November 2026. Consent Managers are registered platforms that store and manage consent on behalf of users. Integrating one is part of the work, and it cannot be the last thing you do before the deadline.
"A company that starts early controls its own schedule. A company that starts late inherits whatever is left."
What to do now
Treat the months ahead as a build window, not a reading window. Start with an audit that maps your data flows and measures every gap against the DPDP Rules. That gives you a prioritised roadmap and a realistic timeline.
Next step
Ready to scope the work?
Book a free 30-minute call. We will map your gaps and tell you exactly what needs building.
Written by Smoketrees Digital LLP, a product engineering studio based in Bengaluru. We implement DPDP compliance directly into codebases for Indian product companies.