Data Privacy & Cyber Law Hub: Rules and Instruments

Data Privacy & Cyber Law Hub: Rules and Instruments: practical Indian finance and law guidance from Finin2min.

A portal page is evidence of process, not a substitute for the Act, Rules, Gazette or binding judgment.

Delegated-law map

Instrument	Purpose
DPDP Rules, 2025	Operational requirements and schedules
Commencement notification, 13 Nov 2025	Three-stage legal commencement
CERT-In directions and FAQs	Six-hour incident reporting and operational records
IT Intermediary Rules, 2021 with later changes	Platform due diligence and grievance obligations
SPDI Rules, 2011	Legacy reasonable-security and sensitive-data controls where applicable
Sectoral rules	RBI, SEBI, IRDAI, telecom and health overlays