India to Notify Data Protection Rules by September 28, 2025

Electronics and Information Technology Minister Ashwini Vaishnaw have confirmed that the rules under the Digital Personal Data Protection (DPDP) Act, 2023 will be formally released by September 28, 2025. This marks a major milestone in India’s journey towards establishing a comprehensive data protection regime that balances privacy, innovation, and national interests.

The DPDP Act was enacted in August 2023 after years of debate and several iterations of draft legislation. Its primary objective is to safeguard citizens’ digital personal data while laying down obligations for companies, government bodies, and intermediaries that process such data. However, many provisions of the law required detailed rules to operationalize compliance, enforcement, and redress mechanisms.

According to the minister, the forthcoming rules will cover data fiduciary responsibilities, rights of data principals (individuals), mechanisms for grievance redressal, obligations for data storage and transfer, and penalties for violations. They will also define the framework for the proposed Data Protection Board, which will act as the adjudicating authority for breaches.

The timing is critical. With India’s digital economy projected to reach $1 trillion by 2030, vast amounts of personal data are being collected across fintech, healthcare, e-commerce, and government services. Concerns over misuse of data, cyberattacks, and cross-border transfers have heightened the urgency for a strong regulatory framework.

Industry stakeholders have expressed cautious optimism. While businesses welcome clarity, many seek assurance that compliance mechanisms will be pragmatic and not stifle innovation. Startups and SMEs in particular are seeking phased implementation timelines. Meanwhile, digital rights activists emphasize the need for robust safeguards against excessive government access to personal data.

If implemented effectively, the DPDP rules could establish India as a trusted jurisdiction for data protection, enhancing consumer confidence and strengthening its position in global trade negotiations.

Latest news

Latha Nathan Joins Fulcrum Digital as Senior Vice President – India Delivery Operations

Fulcrum Digital has appointed Latha Nathan as Senior Vice President – India Delivery Operations. In her new role, she...

Kshema General Insurance Elevates Sunil Mandava to Chief Information Officer

Kshema General Insurance has elevated Sunil Mandava to the position of Chief Information Officer (CIO). In his new role,...

Zscaler Appoints Steve Lee to Lead CXO Advisory for Asia Pacific and Japan

Zscaler has welcomed Steve Lee to lead its CXO Advisory function across Asia Pacific and Japan (APJ). In this...

Ahuja Residences Appoints Namrata Bhujel as Head of Marketing, Communication & PR

Ahuja Residences has appointed Namrata Bhujel as Head – Marketing, Communication & PR. In her new role, she will...
spot_img

You might also likeRELATED
Recommended to you

spot_img