MeitY Releases Draft Rules for Digital Personal Data Protection Act

The Ministry of Electronics and Information Technology (MeitY) released draft rules for the Digital Personal Data Protection (DPDP) Act, 2023, on January 3, 2025. These rules, open for public consultation until February 18, aim to enforce the DPDP Act's provisions, safeguarding personal data collected by "data fiduciaries."

Key provisions include notice requirements for data collection, registration of consent managers, mandatory breach reporting within 72 hours, and deletion of unused user data with prior notice.

Special measures for children's data processing and guidelines for cross-border data processing are also outlined. Stakeholders can submit feedback via the MyGov portal.