DPDP and your website: what Indian businesses actually have to do

India's Digital Personal Data Protection Rules, 2025 were notified on 14 November 2025. The substantive obligations — the ones that change what your website has to do — land in May 2027.

That sounds far away. It is not, for one specific reason: the consent decisions you make now determine whether your ad tracking still works when the rules bite. Businesses that bolt a consent banner on at the last minute typically lose a large share of their conversion data overnight, because the banner blocks the tags and nothing was configured to handle it. Businesses that plan for it keep most of their measurement through modelling.
Read More: Veridiancode