Misplaced Pages

The Digital Personal Data Protection Rules, 2025 (also known as DPDP rules) refer to the personal data protection rules issued to enforce Digital Personal Data Protection Act, 2023, by the Ministry of Electronics and Information Technology, Government of India. The draft rules were made in line with SARAL guidelines under data protection framework.

Timeline

• On 3 January 2025, the draft Digital Personal Data Protection Rules, 2025 were released to public by the Ministry of Electronics and Information Technology for feedback until 18 February 2025.

Draft rules

Overview

The draft rules cover a number of implementation-related topics, including notice given to individuals by the Data Fiduciary, Consent Manager registration and obligations, processing of personal data for the State's issuance of subsidies, benefits, services, etc., the applicability of reasonable security safeguards, notification of a breach of personal data, information about individuals' rights, processing of personal data of children or people with disabilities, the establishment of the Data Protection Board, the appointment and service conditions of the Chairperson and other Board members, the Board's role as a digital office, and the appeals process to the Appellate Tribunal, among other things.

Rules

See also

• Digital Personal Data Protection Act, 2023
• Data Protection Board of India
• General Data Protection Regulation

References

1. Deep, Aroon (2025-01-03). "IT Ministry notifies draft rules under data protection law". The Hindu. ISSN 0971-751X. Retrieved 2025-01-04.
2. "IT ministry releases data protection draft rules for public feedback - CNBC TV18". CNBCTV18. 2025-01-03. Retrieved 2025-01-04.
3. "Govt releases draft Digital Personal Data Protection Rules without any penal clause". Deccan Herald. Retrieved 2025-01-04.
4. "DPDP Act: MeitY releases draft data protection rules for public consultation". www.storyboard18.com. Retrieved 2025-01-04.

• Data protection