In forceStateImprisonment risk
Shops and Establishments Acts
State enactments (36 variants)
Registration, working hours, weekly holidays, leave entitlements, women’s night-shift conditions and display obligations — with genuinely different rules, thresholds, renewal cycles and forms in every state and often every municipal corporation.
- Authority
- State Labour Departments / Municipal Corporations
- Obligations
- 1,147
- Maximum penalty
- Varies by state; typically ₹5,000 to ₹2 lakh
- In force
- 1 Jan 1948
Labour & Employment
In forceCentralImprisonment risk
Companies Act, 2013
Act No. 18 of 2013
The foundational corporate statute: board composition and meetings, related party transactions, CSR under s.135, audit and auditor rotation, statutory registers, MCA21 filings and directors’ responsibility statement under s.134(5).
- Authority
- Ministry of Corporate Affairs / ROC
- Obligations
- 892
- Maximum penalty
- Varies; officer-in-default liability throughout
- In force
- 1 Apr 2014
- Next milestone
- 29 Nov 2026
Corporate & SecretarialESG & Sustainability
In forceStateImprisonment risk
Factories Act, 1948 and State Factory Rules
Act No. 63 of 1948
Factory licensing and renewal, occupier and manager nomination, hazardous process controls, safety officer and welfare officer thresholds, and prescribed registers — with rules, forms, fees and renewal cycles set by each state.
- Authority
- State Factory Inspectorates / DISH
- Obligations
- 682
- Maximum penalty
- Up to ₹2 lakh; imprisonment up to 2 years for occupier
- In force
- 1 Apr 1949
Labour & EmploymentEHS & Environment
In forceCentralImprisonment risk
Drugs and Cosmetics Act, 1940 and Rules
Act No. 23 of 1940
Manufacturing and sale licensing, revised Schedule M good manufacturing practices, Medical Device Rules 2017 classification and licensing, clinical trial approvals and pharmacovigilance obligations.
- Authority
- CDSCO / State Drug Controllers
- Obligations
- 534
- Maximum penalty
- Up to ₹10 lakh; imprisonment up to life for spurious drugs
- In force
- 10 Apr 1940
- Next milestone
- 31 Dec 2026
Product Standards & QualitySectoral Licensing
In forceCentralImprisonment risk
Central Goods and Services Tax Act, 2017
Act No. 12 of 2017
Registration per state, monthly and annual returns, e-invoicing, e-way bills, input tax credit conditions, reverse charge and place-of-supply rules. A multi-state manufacturer files in every state it is registered in.
- Authority
- CBIC / GST Council
- Obligations
- 528
- Maximum penalty
- Up to 100% of tax; prosecution above ₹5 crore evasion
- In force
- 1 Jul 2017
- Next milestone
- 31 Dec 2026
Tax, GST & Customs
In forceCentralImprisonment risk
Income-tax Act, 2025
Act No. 12 of 2025
The replacement for the Income-tax Act, 1961, restructured and simplified but with substantially preserved substance. Withholding, transfer pricing, reporting and assessment obligations all re-sectioned, which breaks every internal reference built over sixty years.
- Authority
- CBDT
- Obligations
- 476
- Maximum penalty
- Interest, penalty and prosecution provisions retained
- In force
- 1 Apr 2026
- Next milestone
- 31 Oct 2027
Tax, GST & Customs
PhasedCentralImprisonment risk
BIS Quality Control Orders
BIS Act, 2016 and QCOs
Mandatory certification under more than 180 Quality Control Orders covering steel, chemicals, toys, electronics, footwear and textiles. New QCOs are notified continuously and typically allow six to twelve months before import and sale become unlawful.
- Authority
- Bureau of Indian Standards / DPIIT
- Obligations
- 418
- Maximum penalty
- Up to ₹5 lakh or 10 times the goods value
- In force
- 12 Oct 2017
- Next milestone
- 1 Jan 2027
Product Standards & Quality
In forceCentral
Central Motor Vehicles Rules and AIS Standards
CMVR, 1989 / AIS standards
Type approval and conformity of production, emission norms including BS-VI and CAFE, safety standards under AIS, recall obligations, and scrappage and registration rules administered by state transport departments.
- Authority
- MoRTH / ARAI / State Transport Departments
- Obligations
- 397
- Maximum penalty
- Type approval withdrawal, recall and penalty
- In force
- 1 Jul 1989
- Next milestone
- 1 Apr 2027
Product Standards & QualitySectoral Licensing
In forceCentral
Environment (Protection) Act, 1986 and Rules
Act No. 29 of 1986
The umbrella environmental statute: consent to establish and operate, environmental clearance conditions, emission and effluent standards, hazardous waste authorisation and environmental statement filing, all administered by State Pollution Control Boards with local variation.
- Authority
- MoEFCC / CPCB / State Pollution Control Boards
- Obligations
- 356
- Maximum penalty
- Up to ₹15 lakh under the 2024 amendment regime
- In force
- 19 Nov 1986
EHS & Environment
In forceCentral
SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015
SEBI LODR Regulations, 2015
Continuous disclosure obligations for listed entities: material events under Regulation 30, corporate governance, related party approvals, quarterly results, and Business Responsibility and Sustainability Reporting including the assured BRSR Core.
- Authority
- SEBI
- Obligations
- 341
- Maximum penalty
- Up to ₹1 crore, plus per-day fines and trading restrictions
- In force
- 1 Dec 2015
- Next milestone
- 30 May 2027
Corporate & SecretarialESG & Sustainability
In forceCentralImprisonment risk
Customs Act, 1962 and allied trade rules
Act No. 52 of 1962
Import and export documentation, classification and valuation, AEO obligations, Rules of Origin certification under CAROTAR, and licence conditions under advance authorisation and EPCG schemes.
- Authority
- CBIC / DGFT
- Obligations
- 312
- Maximum penalty
- Confiscation, redemption fine and penalty up to duty amount
- In force
- 13 Dec 1962
Tax, GST & CustomsForeign Exchange & Trade
In forceCentralImprisonment risk
Electricity Act, 2003 and Green Open Access Rules
Act No. 36 of 2003
Licensing, tariff and open access obligations, renewable purchase obligations that differ by state, captive generation conditions and energy conservation requirements under the linked Energy Conservation Act.
- Authority
- CERC / State Electricity Regulatory Commissions
- Obligations
- 289
- Maximum penalty
- Up to ₹1 lakh plus ₹6,000 per day of continuing default
- In force
- 10 Jun 2003
- Next milestone
- 1 Apr 2027
Sectoral LicensingESG & Sustainability
PhasedCentralImprisonment risk
Occupational Safety, Health and Working Conditions Code, 2020
Act No. 37 of 2020
Registration, licensing, safety committees, annual health examinations, working hours, contract labour and inter-state migrant worker obligations. Consolidates thirteen prior enactments and is administered almost entirely at state level.
- Authority
- Ministry of Labour & Employment / State Factory Inspectorates
- Obligations
- 287
- Maximum penalty
- Up to ₹5 lakh; imprisonment up to 2 years for fatal accidents
- In force
- 21 Nov 2025
Labour & EmploymentEHS & Environment
In forceCentral
IRDAI (Insurance Products, Distribution and Governance) Regulations
IRDAI Consolidated Regulations, 2024
The consolidation of 34 prior regulations into a principles-based set covering product filing, distribution, policyholder protection, expenses of management, rural and social sector obligations and corporate governance.
- Authority
- IRDAI
- Obligations
- 267
- Maximum penalty
- Up to ₹1 crore per contravention
- In force
- 1 Apr 2024
Sectoral LicensingFinancial & PrudentialCompetition & Consumer
In forceCentralImprisonment risk
Food Safety and Standards Act, 2006
Act No. 34 of 2006
Licensing per premises, labelling and display regulations, hygiene and sanitary requirements, food recall procedure, and annual returns — with enforcement by state food safety officers whose interpretations vary.
- Authority
- FSSAI / State Food Safety Commissioners
- Obligations
- 246
- Maximum penalty
- Up to ₹10 lakh; life imprisonment where death results
- In force
- 5 Aug 2011
Product Standards & QualitySectoral Licensing
PhasedCentral
Digital Personal Data Protection Act, 2023
Act No. 22 of 2023
India’s personal data law, covering notice and consent, purpose limitation, breach notification to the Board and data principals, children’s data, and additional duties for Significant Data Fiduciaries. Applies to every organisation processing digital personal data, in any sector.
- Authority
- MeitY / Data Protection Board of India
- Obligations
- 214
- Maximum penalty
- Up to ₹250 crore per instance
- In force
- 14 Nov 2025
- Next milestone
- 13 May 2027
Data, Privacy & Cyber
In forceStateImprisonment risk
Real Estate (Regulation and Development) Act, 2016
Act No. 16 of 2016
Project registration per state authority, escrow of 70% of collections, quarterly project progress updates, agent registration and defect liability — with each state operating its own rules, portal and interpretation.
- Authority
- State RERA Authorities
- Obligations
- 213
- Maximum penalty
- Up to 10% of project cost; imprisonment up to 3 years
- In force
- 1 May 2017
Sectoral LicensingCompetition & Consumer
PhasedCentralImprisonment risk
Code on Social Security, 2020
Act No. 36 of 2020
Provident fund, ESI, gratuity, maternity benefit and gig and platform worker contributions. The revised wage definition changes contribution bases, which makes this a payroll systems change and not only a policy change.
- Authority
- EPFO / ESIC / State Boards
- Obligations
- 203
- Maximum penalty
- Up to ₹1 lakh; imprisonment for non-deposit of employee contribution
- In force
- 21 Nov 2025
Labour & Employment
In forceCentral
Foreign Exchange Management Act, 1999
Act No. 42 of 1999
FDI sectoral caps and conditions, FC-GPR and FLA reporting, overseas direct investment, external commercial borrowings and export realisation timelines. Binds every company with foreign shareholding or cross-border transactions.
- Authority
- RBI / Ministry of Finance
- Obligations
- 198
- Maximum penalty
- Up to three times the sum involved
- In force
- 1 Jun 2000
Foreign Exchange & Trade
PhasedCentralImprisonment risk
Telecommunications Act, 2023
Act No. 44 of 2023
Replaces the Indian Telegraph Act with an authorisation-based framework, covering spectrum assignment, right of way, interception and suspension, user protection and equipment standards.
- Authority
- DoT / TRAI
- Obligations
- 176
- Maximum penalty
- Up to ₹5 crore for unauthorised network operation
- In force
- 26 Jun 2024
Sectoral LicensingData, Privacy & Cyber
In forceCentral
RBI Master Direction on IT Governance, Risk, Controls and Assurance
RBI/2023-24/107 DoS.CO.CSITEG/SEC.7/31.01.015/2023-24
Board-level IT strategy committee, IT and information security governance, business continuity, change management, and IT assurance obligations for banks, NBFCs and other regulated entities.
- Authority
- Reserve Bank of India
- Obligations
- 173
- Maximum penalty
- Supervisory action and monetary penalty under Banking Regulation Act
- In force
- 1 Apr 2024
Sectoral LicensingData, Privacy & CyberFinancial & Prudential
In forceState
Clinical Establishments (Registration and Regulation) Act, 2010
Act No. 23 of 2010
Registration and minimum standards for hospitals, clinics and diagnostic centres, adopted with modifications by states, alongside biomedical waste authorisation, AERB licensing for radiology and NABH accreditation expectations.
- Authority
- State Health Departments
- Obligations
- 168
- Maximum penalty
- Up to ₹5 lakh for non-registration
- In force
- 1 Mar 2012
Sectoral LicensingProduct Standards & Quality
PhasedCentralImprisonment risk
Code on Wages, 2019
Act No. 29 of 2019
Universal minimum wage and timely payment obligations, revised definition of wages affecting PF and gratuity computation, and a single register and return framework — subject to state rules that differ materially between states.
- Authority
- Ministry of Labour & Employment / State Labour Departments
- Obligations
- 164
- Maximum penalty
- Up to ₹1 lakh; repeat offence attracts imprisonment
- In force
- 21 Nov 2025
- Next milestone
- 31 Mar 2027
Labour & Employment
In forceCentral
SEBI Cybersecurity and Cyber Resilience Framework (CSCRF)
SEBI/HO/ITD-1/ITD_CSC_EXT/P/CIR/2024/113
Graded cybersecurity obligations for regulated entities by size, covering governance, SOC monitoring, VAPT, cyber audit, incident reporting to SEBI and cyber capability index submission.
- Authority
- SEBI
- Obligations
- 154
- Maximum penalty
- SEBI enforcement action and monetary penalty
- In force
- 30 Jun 2025
Data, Privacy & CyberSectoral Licensing
In forceCentralImprisonment risk
Consumer Protection Act, 2019 and E-Commerce Rules
Act No. 35 of 2019
Product liability, misleading advertisement and unfair trade practice provisions, e-commerce entity duties including country of origin and seller disclosure, and the dark patterns guidelines applying to all online interfaces.
- Authority
- CCPA / Department of Consumer Affairs
- Obligations
- 147
- Maximum penalty
- Up to ₹50 lakh for misleading advertisement; endorser liability
- In force
- 20 Jul 2020
Competition & Consumer
In forceCentralImprisonment risk
Prevention of Money Laundering Act, 2002
Act No. 15 of 2003
Customer due diligence, beneficial ownership identification, record retention and suspicious transaction reporting for reporting entities — now extending to company secretaries, chartered accountants and other designated professions.
- Authority
- FIU-IND / Enforcement Directorate
- Obligations
- 132
- Maximum penalty
- Attachment of property; imprisonment 3 to 7 years
- In force
- 1 Jul 2005
Anti-bribery & Financial Crime
In forceCentralImprisonment risk
Legal Metrology Act, 2009 and Packaged Commodities Rules
Act No. 1 of 2010
Declarations on pre-packaged commodities, packer and importer registration in each state, weights and measures verification and stamping, and e-commerce listing declarations.
- Authority
- Department of Consumer Affairs / State Legal Metrology
- Obligations
- 118
- Maximum penalty
- Up to ₹1 lakh; imprisonment on repeat offence
- In force
- 1 Apr 2011
Product Standards & QualityCompetition & Consumer
In forceCentral
RBI Digital Lending Directions
RBI Digital Lending Directions, 2025
Key fact statement, direct disbursal and repayment flows, lending service provider due diligence, data collection limits, grievance redressal and reporting of digital lending apps to the RBI directory.
- Authority
- Reserve Bank of India
- Obligations
- 118
- Maximum penalty
- Supervisory action, business restrictions
- In force
- 1 Nov 2025
Sectoral LicensingCompetition & ConsumerFinancial & Prudential
In forceCentral
IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
IT Rules, 2021
Due diligence, grievance redressal, traceability and content takedown obligations for intermediaries, with additional duties for significant social media intermediaries and online publishers.
- Authority
- MeitY / MIB
- Obligations
- 96
- Maximum penalty
- Loss of safe harbour under s.79 IT Act
- In force
- 26 May 2021
Data, Privacy & CyberCompetition & Consumer
In forceCentral
Competition Act, 2002
Act No. 12 of 2003 (as amended 2023)
Anti-competitive agreements, abuse of dominance, and merger control including the deal value threshold introduced in 2023. Settlement and commitment mechanisms now provide an alternative to contested proceedings.
- Authority
- Competition Commission of India
- Obligations
- 96
- Maximum penalty
- Up to 10% of global turnover
- In force
- 13 Jan 2003
Competition & Consumer
PhasedCentral
BRSR Core — Assured Sustainability Disclosure
SEBI Circular SEBI/HO/CFD/CFD-SEC-2/P/CIR/2023/122
Nine attributes requiring reasonable assurance — greenhouse gas intensity, water, waste, energy, employee wellbeing, gender diversity, wages, openness of business and job creation — extending progressively to value chain partners.
- Authority
- SEBI
- Obligations
- 92
- Maximum penalty
- LODR penalty regime, plus per-day fines
- In force
- 1 Apr 2024
- Next milestone
- 1 Apr 2027
ESG & SustainabilityCorporate & Secretarial
In forceCentralImprisonment risk
SEBI (Prohibition of Insider Trading) Regulations, 2015
SEBI (PIT) Regulations, 2015
Structured digital database, insider and designated person lists, trading window closure, code of conduct and disclosure obligations — applicable to every listed company regardless of sector.
- Authority
- SEBI
- Obligations
- 87
- Maximum penalty
- Up to ₹25 crore or three times the profit made
- In force
- 15 May 2015
Corporate & SecretarialAnti-bribery & Financial Crime
In forceCentral
Extended Producer Responsibility — Plastic Packaging
Plastic Waste Management Rules, 2016
Registration as producer, importer or brand owner on the CPCB EPR portal, category-wise recycling and reuse targets, certificate procurement and annual returns. Environmental compensation for shortfall is formula-driven and non-negotiable.
- Authority
- CPCB / State Pollution Control Boards
- Obligations
- 74
- Maximum penalty
- Environmental compensation calculated per tonne of shortfall
- In force
- 16 Feb 2022
- Next milestone
- 30 Jun 2027
EHS & EnvironmentESG & Sustainability
In forceCentral
Bio-Medical Waste Management Rules, 2016
BMW Rules, 2016
Authorisation from the State Pollution Control Board, colour-coded segregation, barcoding, treatment through common facilities, staff training and annual reporting for every health care facility.
- Authority
- CPCB / State Pollution Control Boards
- Obligations
- 71
- Maximum penalty
- Authorisation cancellation and environmental compensation
- In force
- 28 Mar 2016
EHS & Environment
In forceCentral
E-Waste (Management) Rules, 2022
E-Waste (Management) Rules, 2022
EPR registration and annual recycling targets for 106 electrical and electronic equipment categories, reduction of hazardous substances compliance, and certificate-based fulfilment through registered recyclers.
- Authority
- CPCB
- Obligations
- 63
- Maximum penalty
- Environmental compensation for target shortfall
- In force
- 1 Apr 2023
EHS & EnvironmentESG & Sustainability
PhasedCentral
Carbon Credit Trading Scheme, 2023
CCTS, 2023
India’s compliance carbon market. Obligated entities in nine energy-intensive sectors receive greenhouse gas intensity targets, must have emissions verified by accredited agencies, and surrender carbon credit certificates against shortfall.
- Authority
- Bureau of Energy Efficiency / Ministry of Power
- Obligations
- 58
- Maximum penalty
- Environmental compensation at twice the average credit price
- In force
- 1 Apr 2026
- Next milestone
- 30 Sept 2027
ESG & SustainabilityEHS & Environment
In forceCentral
Telecommunications (Telecom Cyber Security) Rules, 2024
G.S.R. 741(E)
Security incident reporting within six hours, telecom cyber security policy, CISO designation and data furnishing obligations under the Telecommunications Act, 2023.
- Authority
- Department of Telecommunications
- Obligations
- 44
- Maximum penalty
- Up to ₹50 lakh per contravention
- In force
- 22 Nov 2024
Data, Privacy & CyberSectoral Licensing
In forceCentral
Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013
Act No. 14 of 2013
Internal Committee constitution at every workplace with ten or more employees, annual reporting to the District Officer and in the Board’s report, training and awareness obligations, and prescribed inquiry timelines.
- Authority
- District Officer / State Women & Child Development
- Obligations
- 41
- Maximum penalty
- Up to ₹50,000 and cancellation of licence on repeat offence
- In force
- 9 Dec 2013
- Next milestone
- 31 Dec 2026
Labour & EmploymentCorporate & Secretarial
In forceCentralImprisonment risk
CERT-In Cyber Security Directions, 2022
CERT-In Direction No. 20(3)/2022
Six-hour incident reporting, 180-day log retention within India, NTP synchronisation and KYC retention obligations for service providers. Among the most frequently missed obligations because the clock is short and the trigger list is broad.
- Authority
- CERT-In, MeitY
- Obligations
- 38
- Maximum penalty
- Up to ₹1 lakh and/or prosecution under s.70B(7) IT Act
- In force
- 28 Jun 2022
Data, Privacy & Cyber
