The Ministry of Electronics and IT notified the DPDP Rules, 2025 (refer to infographic) marking the full operationalization of the DPDP Act, 2023.
- The rules are a significant step forward in compliance with the Supreme Court’s 2017 K.S. Puttaswamy v. Union of India judgment affirming the right to privacy.
About DPDP Act, 2023
- It establishes a comprehensive framework for protecting digital personal data, setting out the obligations of entities handling such data (Data Fiduciaries) and the rights and duties of individuals (Data Principals).
- Scope:
- Processing of digital personal data within India where such data is collected: In digital form or in non-digital form and digitized subsequently.
- Processing of personal data outside India if it is for offering goods or services in India.
- Obligations of Data Fiduciaries:
- User Consent: Personal data may be processed after obtaining the consent of the individual.
- Processing of personal data of children/person with disability: Verifiable consent of parent or the lawful guardian is mandatory.
- Enforcement: Data Protection Board (DPB) has civil court powers for personal data breach complaints.