NewDelhi: The Ministry of Electronics and Information Technology has revealed the draft rules for the Digital Personal Data Protection Act (DPDP) on January 3, 2025. These rules have been eagerly awaited since the Act was passed by Parliament in August 2023. The government is seeking public feedback on the draft rules through the MyGov portal until February 18, 2025.
The newly proposed regulations aim to clarify various provisions of the law, including requirements for data fiduciaries to provide notice, registration of consent managers, and obligations regarding the processing of children’s personal data. The rules are expected to establish a framework for the creation of a Data Protection Board, including the appointment and terms of service for its chairperson and other members.
The DPDP Act represents a significant step towards regulating how both private and governmental entities handle citizens’ data. Despite its passage, the law has faced criticism from opposition parties for allegedly infringing on privacy rights, leading to calls for further discussions in parliamentary panels.
Key provisions of the draft rules include:
Parental Consent for Minors: Children under the age of 18 will require parental consent to create social media accounts. This measure aims to enhance protections for minors online.
Data Transfer Regulations: Companies will need government approval to transfer personal data outside India.
Transparency in Data Breaches: If an individual’s personal data is compromised, entities such as social media platforms and financial institutions will be required to inform the affected individual about the breach’s nature, timing, and potential consequences.
The draft rules are open for public consultation until February 18, after which stakeholder feedback will be considered before finalising the regulations. Notably, the draft does not specify any punitive measures for violations at this stage.
As digital privacy continues to be a pressing concern globally, these draft regulations reflect India’s commitment to establishing a robust framework for personal data protection while balancing technological advancement and individual rights.
Comments are closed.