Bill On Personal Data Protection

Over 200 participants, including key government officials from various ministries, industry leaders, legal experts, and policymakers, discussed the rules

Union minister Ashwini Vaishnaw on Tuesday said the government will hold wider and more consultation meetings with industry bodies on the draft data protection rules. The government held its first consultation meeting with industry representatives on draft Digital Personal Data Protection (DPDP) Rules 2025. "A lot of suggestions have come from digital platforms. We will now start focussed consultation process with various industry organisations. We want consultation to be very extensive," Vaishnaw said. According to an official statement, the consultation attracted representatives from various sectors such as technology, consulting, MSMEs, banking, and finance. Some notable organisations in attendance included DSCI, NPCI, PwC, Apple, Microsoft, Snapchat, Accenture, Zomato, Deloitte, KPMG, PhonePe, OpenAI, and others. Vaishnaw in the meeting highlighted the importance of understanding the full scope of the framework, stressing that to gain a clear understanding of the framework for

The draft protection rules released by the government create a balance between regulation and innovation while completely protecting citizen rights, Union minister Ashwini Vaishnaw said on Saturday. The government issued draft rules for the Digital Personal Data Protection (DPDP) Act on Friday for public consultation till February 18. "Rules have to be within four walls of the Act. It is within the ambit of the Act passed by Parliament. These rules have been framed to ensure a balance between regulation and innovation while completely safeguarding the rights of citizens," Vaishnaw told PTI in an interview. The minister said earlier there was only one template available to the world -- the European data protection rule with a high level of regulation. However, Indian rules have attempted to balance the regulation with innovation to safeguard the boom in the innovation ecosystem developing among startups in the country. He said extensive consultations have been held with the industry

The government has released the long-awaited draft of Digital Personal Data Protection Rules that do not mention any penal action for violations. The draft rules, which have been published for public consultations, will be taken into consideration for making the final rule after February 18. "Draft of rules proposed to be made by the central government in exercise of the powers conferred by sub-sections (1) and (2) of section 40 of the Digital Personal Data Protection Act, 2023 (22 of 2023), on or after the date of coming into force of the Act, are hereby published for the information of all persons likely to be affected thereby," the draft notification said. The draft rules have laid out provisions related to consent processing of individuals, data processing bodies and the functioning of authorities under the Digital Data Protection Act, 2023. "...notice is hereby given that the said draft rules shall be taken into consideration after 18th February, 2025," the notification said.

The PwC Survey on Data Privacy revealed substantial gaps in understanding the Digital Personal Data Protection Act (DPDPA)

Digital rights and advocacy groups said that the delay in the notification of rules is creating business uncertainty and has limited individuals' ability to exercise rights given to them

They have to 'figure out' how they want to implement age-gating requirement, says source

The notification of the rules to India's data privacy law have been long awaited

The threat actor has put out around 2 Gigabytes of personally identifiable information (PII) of boAt users on dark web forums, claimed the reports

The personal data of 7.5 million boAt customers is a being sold at just two euros on the dark web

The framework will operate as a part of the Digital Personal Data Protection Act, of 2023, which was passed by the parliament in August

Amidst digital transformation, industry grapples with new privacy mandates

Social media platforms are worried about losing users which include children, since children may only be able to use these platforms if parents give their consent

Only 2 out of the 100 analysed websites provided consent in multiple regional languages

The stakeholders also said that implementation of eKYCs may create an immense cost burden for startups and smaller organisations, considering that the number of users is in millions

Companies feel that the "timelines are too short," as the new DPDP Act will require a complete overhaul of their entire internal systems

MeitY officials have already conducted meetings with consumer protection groups who have pushed for immediate enactment of the Privacy Act

As per the Act, the govt may come out with rules directing the platforms about expected line of action to comply with all the provisions

Countries such as New Zealand said that they are taking a 'keen interest' in the implementation of the Bill and also its approach to privacy regulation

Data Protection Board of India could play an essential role in bringing about regulatory agility and striking the right balance between regulation and innovation in a data-dependent digital economy