Data Protection
MeitY releases Draft Digital Personal Data Protection Rules, 2025 for public consultation; Feedback/comments sought from public by 18th February, 2025
The Ministry of Electronics and Information Technology has drafted the Digital Personal Data Protection Rules, 2025. Consequently, it will facilitate implementing the Digital Personal Data Protection Act, 2023 (DPDP Act). Moreover, it aims to strengthen the legal framework for the protection of digital personal data. All in all it will provide necessary details and an actionable framework. It has invited the stakeholders to share feedback/comments on the draft rules.
In line with the SARAL framework, the rules writing use certain principles like simple language, unnecessary cross referencing, contextual definition, and illustrations etc. The text of the rules is available on the MeitY’s website. Also available is the simplified explanatory notes to enhance accessibility and understanding of the draft rules
Overview of Draft Rules
The draft rules details about the various implementation aspects. All in all, these aspects are as follows:
- The notice by the Data Fiduciary to the individuals
- Registration and obligations of Consent Manager
- Processing of personal data for issuance of subsidy, benefit, service etc. by State
- Applicability of reasonable security safeguards
- Intimation of personal data breach
- Providing details about availing of their rights by the individuals
- Processing of personal data of child or of person with disability
- Setting up the Data Protection Board
- Appointment and service conditions of the Chairperson and other members of the Board
- Functioning of Board as digital office
- Procedure to appeal to Appellate Tribunal among others.
Feedback/Comments for Draft Rules
In this regard, feedback/comments may be submitted via the MyGov portal at the following link: https://innovateindia.mygov.in/dpdp-rules-2025 . The last date for submission is 18th February, 2025.
The DPDP Act, which received the assent of the President of India, establishes a framework for processing digital personal data. It also balances the individual’s right to protect personal data with the need to process such personal data for lawful purposes.
Reference and Related Information
Press Information Bureau: Draft Digital Personal Data Protection Rules, 2025
Draft Digital Personal Data Protection Rules, 2025
Explanatory Note on Draft Digital Personal Data Protection Rules, 2025
*****
Want to stay informed and inspired? Subscribe to our blog for insightful updates delivered straight to your inbox. Explore our website for a curated collection of reference books, resources, and more – designed to fuel your curiosity and keep you ahead.
Download this post for quick, offline reference: