As of mid-2025, the DPDP Act remains formally in force, although the government has not yet issued the notification bringing its provisions into effect. This waiting period ensures that the necessary infrastructure (e.g., the Data Protection Board and IT systems for consent management) and the final Rules are in place. In June 2025, as a preparatory step, MeitY released a detailed Business Requirement Document (BRD) outlining the technical specifications for Consent Management Systems under the Act, indicating that the compliance ecosystem is being built even before full enforcement.