India's data privacy law came into force on Friday after the government notified the Digital Personal Data Protection (DPDP) Rules 2025, more than two years after the Act was passed by Parliament. Companies will need to comply with the Act's provisions within 12 to 18 months. The law requires firms to safeguard digital data of Indian citizens.