The Ministry of Electronics and Information Technology (MeitY) has asked the public to send objections and suggestions to the draft rules proposed for the Digital Personal Data Protection Rules, 2025. The public feedback can be submitted on mygov.in; the draft rules will be taken into consideration after February 18, the Ministry said in a notification on Friday.
Some of the salient features of the draft rules include greater consumer control over data; users can demand deletion of their data; companies should be more transparent with personal data; right for consumers to ask the reason why their data is being collected, and huge penalty of up to Rs 250 crore for data breach.
Once implemented, the Act will empower consumers with greater control over their data. Companies handling user data will be required to disclose the information they possess, enabling users to request its deletion or specify usage preferences. Additionally, consumers will have the right to demand details on the purpose of data collection, permissible uses, and the timeline for its deletion.
The draft, titled “Digital Personal Data Protection Rules, 2025,” applies to personal data processing within India and to entities offering goods or services to individuals in India. The rules encompass data fiduciaries, data processors, and consent managers, establishing detailed accountability measures.
The rules are expected to provide clarity on various provisions of the law including notice by data fiduciary to individuals, registration and obligations of consent manager, processing of personal data of children and so on.
The rules are also expected to provide clarity regarding the setting up of the Data Protection Board, appointment and service conditions of the chairperson and other members of the board.
The regulations aim to address crucial aspects of data protection. These include how organizations must notify individuals about data collection, the framework for consent management, and safeguards for processing children’s personal information.
The Digital Personal Data Protection Act, 2023 was passed by the Parliament in 2023. The draft rules, once finalised and notified, will come into force.
