Data Protection Act

New data protection rules boost transparency, yet compliance gaps persist

The Act and the Rules refer to individual digital users as "data principals", and the Act is expected to offer individuals greater control over their personal information

The Ministry of Electronics and Information Technology has urged tech firms to adopt advanced methods for obtaining parental consent while allowing them to determine the best practices independently

Tech giants Google, Meta, YouTube, and Snap are concerned over India's new Digital Personal Data Protection Act's restrictions on behavioural tracking of children as they may compromise child safety

Drafting of rules under the data protection legislation is in advanced stage with industry-wide consultations slated soon, Union Minister Ashwini Vaishnaw said on Saturday, asserting that India will also look at doubling electronics production and adding jobs under the Modi 3.0 government. At the same time, the Minister for Electronics and IT assured that regulatory work will see "good continuity" and that the agenda on digital regulatory framework remains "intact". The timelines for semiconductor plants of Micron and Tata Group too are on track. The process of implementation of the Digital Personal Data Protection (DPDP) Act will be based on 'digital-by-design' principle, paving the way for a new way of working, and the work on creating this 'digital by design' platform is also moving in parallel. Such a platform or portal will be created in-house by the likes of NIC and DIC. The Parliament had passed the DPDP Act in August last year. The key piece of legislation aims to protect th

The notification of the rules to India's data privacy law have been long awaited

BSA, which represents the global software industry, wants companies to get at least 72 hours to report data breaches

The task force is expected to submit the report within a period of 1 month from the issuance of the order

As India's first-ever dedicated legislation for digital privacy, the DPDP Act provides broad principles of collection and processing of personal information in digital form

While the rules that would provide exact processes of the DPDP Act are yet to be notified, the government has consistently claimed that large organisations must not require much time to comply

It follows Meta's talks to launch a similar plan in the European Union (EU) to conform with its privacy concerns

Invoking UAPA against a news outfit is overreaction

Only 2 out of the 100 analysed websites provided consent in multiple regional languages

Only 17% of Indian organisations have listed the email IDs of customer care or other functions for queries with respect to data protection

The stakeholders also said that implementation of eKYCs may create an immense cost burden for startups and smaller organisations, considering that the number of users is in millions

Fintechs, banks and non-bank financial companies (NBFCs) will have to redraw their contracts with their business partners with whom customer data gets shared

The government may give around six months to industry to align with the Digital Personal Data Protection Act, Minister of State for Electronics and IT Rajeev Chandrasekhar on Monday said. However, the actual transition time will be decided after consultation with stakeholders, he added. During a fireside chat session with students at Delhi University, Chandrasekhar said the government is ready with all rules and ready to notify the Data Protection Board soon. The minister said the migration to the new regime should not lead to any disruption in the businesses. "We may give a certain amount of time for platforms to migrate, to have consent managers, redesign their consent form, make sure data processing is aligned to the act...we will not give them 2 years. It will be some number, six months or something like that so that transition is orderly," Chandrasekhar said. He said there will be enough time given so that people become aware of their rights, and MSME should also get some tim

The provision was one of the most contentious issues during the public consultations on the bill

Stringent legal obligation to prevent breaches has companies reviewing their security practices

Union Minister of State for Electronics and Information Technology Rajeev Chandrasekhar on Thursday said the Digital Personal Data Protection Act (DPDP Act) passed by Parliament recently will make digital companies handle the data of Indian citizens under absolute legal obligation. Calling the law an important milestone in the cyber law framework, Chandrasekhar said there will be punitive consequences of high penalty and even blocking them from operating in India. "The Digital Personal Data Protection Act that was passed by Parliament a few days ago is a very important milestone in the global standard cyber law framework that Prime Minister Narendra Modi wanted to build for the India Techade' (a decade of technology) for a trillion dollar digital economy," the union minister told PTI. The DPDP Bill is aimed at giving Indian citizens a right to have his or her data protected and casts obligations on all companies, all platforms be it foreign or Indian, small or big, to ensure that th