---
title: "Tightening The DPDP Screw: 12‑Month Compliance Window On Government’s Radar"
date: 2026-02-11
author: "IndiaLaw LLP"
url: https://www.indialaw.in/blog/data-privacy/dpdp-compliance-ready-in-12-months/
---

# Tightening The DPDP Screw: 12‑Month Compliance Window On Government’s Radar

Posted On - 11 February, 2026 •

By - [IndiaLaw LLP](https://www.indialaw.in/author/indialaw-llp/ "Posts by IndiaLaw LLP")

[![DPDP Compliance: Are You Ready in 12 Months?](https://www.indialaw.in/wp-content/uploads/y5asqegxrr8.jpg)](https://www.indialaw.in/wp-content/uploads/y5asqegxrr8.jpg)

India’s Digital Personal Data Protection (DPDP) law and its implementing rules set out a phased roadmap for organisations to align with new privacy obligations. Initially, companies were given up to **18 months** from notification to meet core requirements. However, the government is now exploring **shortening the DPDP compliance horizon to 12 months**, especially for larger players and significant data fiduciaries, creating an intensified regulatory push into 2026.

## Table of Contents

## Industry Pushback Against Timeline Squeeze

Industry groups and digital associations have pushed back against proposals to compress the compliance window, warning that compressing an already tight transition period could strain technical, legal, and operational functions. Many organisations emphasise that thorough system redesigns, data‑flow audits, and cross‑functional change programs take time and that a rushed schedule could lead to security gaps and uneven implementation.

## Top Focus Areas for Immediate Compliance

Whether the government retains the existing 18‑month plan or shifts to an accelerated 12‑month timeline, organisations should prioritise:

- **Consent mechanisms** – Move beyond generic privacy notices to purpose‑specific, revocable, and auditable consent systems.
- **Retention discipline** – Clearly define lawful retention periods and automatically delete data that is no longer needed.
- **Breach preparedness** – Build and test incident response plans aligned with statutory breach notification timelines.
- **Governance for Significant Data Fiduciaries** – Embed risk assessments, accountability structures, and Data Protection Officer (DPO) roles.
- **Cross‑border flow mapping** – Document cloud use, vendor arrangements, and overseas processing.

## Immediate Action Plan: Day 1 Kickoff for Organisations

Assemble a cross-functional DPDP task force with executive buy-in today, allocating resources and setting weekly milestones to drive progress within the 12-month horizon.

### Phase 1 (Weeks 1–4): Blitz Data Mapping and Audits

Start by cataloguing all personal data flows, where data is collected, processed, stored, and shared, and identify high‑risk categories such as children’s data or international transfers.

### Phase 2 (Weeks 5–12): Forge Consent and Retention Engines

Roll out granular consent systems that support easy withdrawal and automate retention expiry actions. Audit key third‑party vendors to ensure they are aligned with DPDP norms.

### Phase 3 (Months 4–6): Breach Drills and Governance Strengthening

Develop breach response playbooks, conduct table‑top exercises, and solidify governance frameworks including annual risk assessments and DPO roles.

### Phase 4 (Months 7–12): Scale, Test, and Certify

As the compliance deadline approaches, organisations should execute full system rollouts, conduct A/B tests on user journeys, validate breach responses, and embed privacy‑by‑design in new development efforts. Third‑party audits and real‑time monitoring dashboards will help catch gaps early, and cross‑functional simulation tests will build organisational confidence ahead of certification or regulatory review.

## Penalties for Non‑Compliance: High Stakes Ahead

The DPDP framework carries significant financial penalties up to ₹250 crore per instance, for non‑compliance. Organisations can face fines running into crores of rupees for violations such as inadequate consent practices, excessive retention of personal data, or delayed breach reporting. Significant Data Fiduciaries, in particular, may face heightened scrutiny and enforcement measures, making early adherence both a legal requirement and a risk mitigation strategy.

## Building DPDP Resilience: A Strategic Outlook Beyond Compliance

DPDP preparation should be treated not just as a regulatory checklist exercise but as an opportunity to elevate data governance and build long‑term trust. Organisations can institutionalise privacy education, integrate ethical AI controls, and make continuous compliance a business asset.

Maintaining active engagement with government updates and industry forums will ensure organisations remain adaptive, turning what many see as a compressed timeline into a catalyst for deeper operational resilience and strategic data leadership.

**For more details, write to us at**[**contact@indialaw.in**](mailto:contact@indialaw.in)

**References:**

- [**https://www.hindustantimes.com/india-news/industry-groups-asks-it-ministry-to-not-shorten-compliance-timeline-under-dpdp-101770233287416.html**](https://www.hindustantimes.com/india-news/industry-groups-asks-it-ministry-to-not-shorten-compliance-timeline-under-dpdp-101770233287416.html)

[Technology Law](https://www.indialaw.in/expertise/technology-law/)

---

# IndiaLaw LLP — Offices & Contact Details

---

## General Contact

| | |
|---|---|
| **Website** | https://www.indialaw.in |
| **Primary email** | contact@indialaw.in |
| **Primary phone** | +91 836-9995919 |
| **Contact form** | https://www.indialaw.in/connect/ |
| **Careers (separate channel)** | https://www.indialaw.in/careers/ |


---

## All Offices (9 locations across 8 cities)

### 1. Mumbai — Registered Office & Head Office (Apeejay Chambers)

| | |
|---|---|
| **Address** | Apeejay Chambers, Ground Floor, Wallace Street, Fort, Mumbai – 400 001 |
| **Phone** | [022-6924-7400](tel:02269247400) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/mumbai/ |
| **Practice focus** | Litigation · Arbitration · Insolvency & Bankruptcy · Corporate · Banking · Real Estate · IP |
| **Notes** | The HQ. 5 partners based here. Handles PAN-India litigation, arbitration, corporate, banking, IP and real estate practice. Largest team across all offices. |

### 2. Mumbai — Non-Litigation Office (Excelsior, Fort)

| | |
|---|---|
| **Address** | 4th Floor, New Excelsior Theatre Pvt. Ltd., Amrit Keshav Nayak Marg, Fort, Mumbai – 400 001 |
| **Phone** | [022-697-40500](tel:022-697-40500) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/mumbai/ |
| **Practice focus** | Non-litigation only — consultations, negotiations, transactional work |
| **Notes** | Opened 2024. Litigation and arbitration remain at the Apeejay Chambers head office. |

### 3. Delhi

| | |
|---|---|
| **Address** | Flat No. 1107 & 1108, Prakashdeep Building, Tolstoy Marg, Connaught Place, New Delhi – 110 001 |
| **Phone** | (general line: +91 836-9995919) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/delhi/ |
| **Practice focus** | Litigation · Arbitration · Insolvency & Bankruptcy · Corporate · Banking · Real Estate |
| **Notes** | 3 partners based here. Located near the Supreme Court of India, Delhi High Court and other appellate bodies. |

### 4. Kolkata

| | |
|---|---|
| **Address** | Centre Point Building, Room No. 214, 2nd Floor, Premises No. 21, Hemanta Basu Sarani, Opp. Great Eastern Hotel, P.S. Hare Street, Kolkata – 700 001, West Bengal |
| **Phone** | [+91 33 4813 1001](tel:+913348131001) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/kolkata/ |
| **Practice focus** | Insolvency & Bankruptcy · Commercial & Civil Litigation · Arbitration · Banking Litigation · Real Estate · Labour & Employment · Consumer |
| **Notes** | Advises banks, NBFCs, MSMEs and corporates on transactions and dispute resolution. Works in close coordination with the Mumbai HO. |

### 5. Chennai

| | |
|---|---|
| **Address** | GF-A, 19 Casa Major Road, Egmore, Chennai – 600 008 |
| **Phone** | (general line: +91 836-9995919) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/chennai/ |
| **Practice focus** | Litigation · Insolvency & Bankruptcy · Real Estate |
| **Notes** | Full-fledged office with experienced legal team. Supported by Mumbai HO. |

### 6. Bengaluru (Bangalore)

| | |
|---|---|
| **Address** | INDIALAW LLP, No. 7 Chinnaswamy Mudaliar Road, Shivaji Nagar, Bangalore – 560 051 |
| **Phone** | [080-4167-2444](tel:08041672444) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/bengaluru/ |
| **Practice focus** | Litigation · Insolvency & Bankruptcy · Real Estate · Family Laws · Labour |
| **Notes** | Located near Bangalore High Court. Handles corporate, commercial, banking and matrimonial disputes. |

### 7. Hyderabad

| | |
|---|---|
| **Address** | 403, 4th Floor, Sanatana Ecstasy Building, beside Tanishq Show Room, Himayathnagar, Hyderabad – 500 029, Telangana |
| **Phone** | [040-6666-5166](tel:04066665166) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/hyderabad/ |
| **Practice focus** | Litigation · Banking · Insolvency & Bankruptcy · Real Estate |
| **Notes** | Particularly well known for complex banking matters and real estate transactions. |

### 8. Cochin (Kochi)

| | |
|---|---|
| **Address** | Second Floor, Pulikkal Building, K.K. Padmanabhan Road, Ernakulam North – 682 018, Kerala |
| **Phone** | [0484-3583961](tel:04843583961) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/cochin/ |
| **Practice focus** | Litigation · Insolvency & Bankruptcy · Real Estate |
| **Notes** | Commercial disputes, property litigation, financial-claim arbitrations and real estate transactions. |

### 9. Noida (NCR)

| | |
|---|---|
| **Address** | No. 16 & 17, Silver Offices, 17th Floor, Wave One, Sector 18, Noida – 201 301 |
| **Phone** | (general line: +91 836-9995919) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/noida/ |
| **Practice focus** | Aviation · Insurance · Mergers & Acquisitions · Corporate |
| **Office head** | **Mr. Dinesh Gupta** (joined August 2025 to lead and expand the corporate practice) |
| **Notes** | Newest office. Sector-focused on highly regulated industries serving NCR-based clients. |

---

## Quick-Dial Phone List

| Office | Phone |
|---|---|
| Mumbai HO (Apeejay) | 022-6924-7400 |
| Mumbai Excelsior | 022-697-40500 |
| Kolkata | +91 33 4813 1001 |
| Bengaluru | 080-4167-2444 |
| Hyderabad | 040-6666-5166 |
| Cochin | 0484-3583961 |
| **General / Marketing line** | **+91 836-9995919** |

Delhi, Chennai and Noida route through the general number.

---

## Social Channels

- LinkedIn: https://www.linkedin.com/company/indialaw
- X / Twitter: https://twitter.com/Indialawmumbai
- Facebook: https://www.facebook.com/indialawllp/
- Instagram: https://www.instagram.com/indialawllp

---