India’s Digital Personal Data Protection (DPDP) law and its implementing rules set out a phased roadmap for organisations to align with new privacy obligations. However, the government is now exploring shortening the DPDP compliance horizon to 12 months, especially for larger players and significant data fiduciaries, creating an intensified regulatory push into 2026. Governance for Significant Data Fiduciaries – Embed risk assessments, accountability structures, and Data Protection Officer (DPO) roles. Penalties for Non‑Compliance: High Stakes AheadThe DPDP framework carries significant financial penalties up to ₹250 crore per instance, for non‑compliance. Significant Data Fiduciaries, in particular, may face heightened scrutiny and enforcement measures, making early adherence both a legal requirement and a risk mitigation strategy.

Source: Hindustan Times February 11, 2026 19:12 UTC