The Ministry of Electronics and Information Technology (MeitY) released the Draft Digital Personal Data Protection Rules, 2025, to facilitate the implementation of the Digital Personal Data Protection Act, 2023 (DPDP Act). The Draft Rules addresses key aspects such as obligations for data fiduciaries, registration and roles of consent managers, the lawful processing of data for issuance of subsidy, benefit, service etc., by State, provisions on reasonable security safeguards, data breach notifications, and protocols for handling children’s data. It also provides for the constitution and functioning of the Data Protection Board. A simplified explanatory note and the full Draft Rules have been made available on MeitY’s official website for public review.
MeitY invites public feedback/comments on the proposed rules under the Digital Personal Data Protection Act, 2023 until February 18, 2025.
Source: https://pib.gov.in/PressReleasePage.aspx?PRID=2090048