# DPDP Rules 2025, Rule 15: transferring data outside India

> Canonical page: https://mksd0398.github.io/dpdp-act-skill/rules/rule-15-transfers-outside-india/
> Not legal advice. Educational compliance reference only; no lawyer-client relationship arises from its use and the author is not a lawyer. Verify statutory text against the Gazette of India and consult qualified Indian legal counsel before acting.

Digital Personal Data Protection Rules, 2025. Secondary-sourced from the PIB release and cross-checked sources; verify against the notified Gazette text before external use.

## Rule 15, transfers outside India

Personal data processed by a Data Fiduciary under the Act **may be transferred outside the
territory of India**, subject to the restriction that the Data Fiduciary shall meet such
requirements as the **Central Government may, by general or special order, specify** in respect of
making that personal data available to **any foreign State**, or to any person or entity **under
the control of, or any agency of, such a State**.

Reading:
- Confirms the **permissive default**. There is no adequacy regime, no SCCs, no transfer impact
  assessment under DPDP.
- The specific concern addressed is **onward availability to foreign governments**, not commercial
  transfer as such.
- **Act s.16(1)** negative-list notifications remain the mechanism for restricting named countries,
  and **s.16(2)** preserves stricter sectoral law.