Timeline
A complete visual timeline of India's data protection journey.
🎯 Learning Objectives
- ▸ Memorize key dates and milestones
- ▸ Understand the trajectory of privacy law in India
The 12-Year Journey
| Year | Milestone |
|---|---|
| 2011 | Justice Shah Committee formed. |
| 2012 | Shah Committee submits report. |
| 2017 | Supreme Court delivers Puttaswamy judgment. |
| 2018 | Srikrishna Committee submits draft PDP Bill. |
| 2019 | PDP Bill 2019 introduced in Parliament. |
| 2021 | JPC submits report on PDP Bill. |
| 2022 | PDP Bill withdrawn, DPDP Bill 2022 introduced. |
| 2023 | DPDPA 2023 passed and gets Presidential assent. |
| 2025-2027 | DPDP Rules and phased implementation. |
India's journey has been slow and iterative, but the resulting DPDPA is tailored to the Indian context—simpler than GDPR but with high penalties to ensure compliance.
📖 Glossary
- Puttaswamy Judgment
- The 2017 Supreme Court case that recognized privacy as a fundamental right.
🔑 Key Takeaways
- 2011: Shah Committee formed.
- 2017: Puttaswamy Judgment.
- 2018: Srikrishna Committee and PDP Bill.
- 2023: DPDPA Passed.
📚 Further Reading
- Timeline of Data Protection in India — Legal Galaxy (2024)

Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...