The Ministry of Electronics and IT (MeitY) initiated industry consultations on implementation. Officials indicated a “graded compliance timeline” whereby larger and more experienced
companies (especially Big Tech firms) would be expected to comply first. At the same time, startups and small enterprises might get a longer transition period. The Minister of State (IT) suggested that implementation of key provisions could occur within ~6 to 10 months of enactment, rather than waiting years, given global awareness of data privacy norms. During this time, the government also aimed to constitute the Data Protection Board of India (the regulatory body) and draft the necessary Rules under the Act within about 30 days.
Deadline