Back to Module
18 of 18|History of Data Protection
reading 10 min•India's Journey

Timeline

A complete visual timeline of India's data protection journey.

🎯 Learning Objectives

  • ▸ Memorize key dates and milestones
  • ▸ Understand the trajectory of privacy law in India

The 12-Year Journey

YearMilestone
2011Justice Shah Committee formed.
2012Shah Committee submits report.
2017Supreme Court delivers Puttaswamy judgment.
2018Srikrishna Committee submits draft PDP Bill.
2019PDP Bill 2019 introduced in Parliament.
2021JPC submits report on PDP Bill.
2022PDP Bill withdrawn, DPDP Bill 2022 introduced.
2023DPDPA 2023 passed and gets Presidential assent.
2025-2027DPDP Rules and phased implementation.

India's journey has been slow and iterative, but the resulting DPDPA is tailored to the Indian context—simpler than GDPR but with high penalties to ensure compliance.

📖 Glossary

Puttaswamy Judgment
The 2017 Supreme Court case that recognized privacy as a fundamental right.

🔑 Key Takeaways

  • 2011: Shah Committee formed.
  • 2017: Puttaswamy Judgment.
  • 2018: Srikrishna Committee and PDP Bill.
  • 2023: DPDPA Passed.

📚 Further Reading

  • Timeline of Data Protection in India — Legal Galaxy (2024)
Shilpi Kulshrestha
Course Author

Shilpi Kulshrestha

Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...