The Ministry of Electronics and Information Technology (MeitY) has invited public feedback and comments on the draft Digital Personal Data Protection Rules, 2025, an essential step toward implementing the Digital Personal Data Protection Act, 2023 (DPDP Act). This move underscores India’s commitment to creating a robust data protection framework that balances individual privacy with the needs of the digital economy.

Timelines

• 03rd January 2025Start Date – Form Submission
• 18th February 2025 Last date of Form Submission

Background on the DPDP Act, 2023

The Digital Personal Data Protection Act, 2023 received the assent of the Hon’ble President of India on 11th August 2023. This landmark legislation was introduced to establish a comprehensive legal framework for protecting personal data in the digital ecosystem. The Act aims to:

1. Safeguard individuals’ personal data.
2. Establish accountability mechanisms for data processors and fiduciaries.
3. Facilitate the growth of the digital economy while respecting privacy.

To operationalize the provisions of the Act, MeitY has now released the draft Digital Personal Data Protection Rules, 2025, detailing the necessary implementation framework and specifics.

Key Features of the Draft Rules

MeitY has designed the draft rules to simplify the understanding of the Act’s provisions and provide an actionable framework for compliance. The draft includes explanatory notes written in plain language to ensure accessibility for stakeholders from diverse backgrounds. While the specifics of the rules are detailed on the Ministry’s website, the following key aspects stand out:

1. Clarity in Implementation: The rules provide step-by-step guidance on implementing the provisions of the DPDP Act, ensuring transparency and ease of compliance.
2. Rights and Obligations: Detailed explanations of individuals’ rights regarding their personal data and the obligations of data processors and fiduciaries.
3. Accountability Framework: Rules to ensure accountability mechanisms for the proper handling of personal data, including penalties for non-compliance.
4. Exemptions and Special Cases: Provisions for exemptions in specific scenarios to maintain a balance between individual privacy and national or organizational needs.

Call for Public Feedback

MeitY is committed to fostering an inclusive approach by inviting feedback from stakeholders, including individuals, businesses, and civil society organizations. Feedback is being sought specifically on the draft rules in a rule-wise manner to ensure targeted and actionable inputs. The Ministry has assured the public that:

1. Confidential Submissions: All feedback and comments will be held in fiduciary capacity and will not be disclosed to anyone at any stage. This enables individuals to share their inputs freely and without hesitation.
2. Consolidated Summary: A summary of the feedback received, excluding any attribution to individual stakeholders, will be published after finalizing the rules.

How to Submit Feedback

Stakeholders can access the draft rules and explanatory notes on MeitY’s official website at https://www.meity.gov.in/data-protection-framework. Feedback/comments can be submitted via the MyGov portal by visiting https://innovateindia.mygov.in/dpdp-rules-2025/. The last date for submitting feedback is 18th February 2025.

Please Click here to view Draft Digital Personal Data Protection Rules, 2025

Please Click here to view Explanatory Note on Draft Digital Personal Data Protection Rules, 2025

Importance of Public Participation

This initiative by MeitY highlights the significance of public participation in shaping data protection policies. By seeking input from diverse stakeholders, the Ministry aims to:

1. Enhance Transparency: Ensuring that the rules are developed through an open and consultative process.
2. Address Practical Challenges: Identifying potential challenges in the implementation of the Act and resolving them proactively.
3. Strengthen Public Trust: Building trust among citizens and stakeholders by demonstrating accountability and inclusivity.

Conclusion

The draft Digital Personal Data Protection Rules, 2025, mark a significant step toward operationalizing the DPDP Act, 2023. MeitY’s commitment to engaging the public in this process underscores the government’s dedication to creating a transparent, accountable, and inclusive framework for data protection in India.

Stakeholders are encouraged to review the draft rules and provide their valuable feedback to ensure that the final regulations reflect the needs and aspirations of all segments of society. By participating in this consultation process, individuals and organizations can contribute to shaping the future of data protection in India.