Mint Quick Edit | India’s new privacy rules: A mixed bag
2 months, 2 weeks ago

Mint Quick Edit | India’s new privacy rules: A mixed bag

Live Mint  

More than a year after the Digital Personal Data Protection Act was passed, the government has released the draft rules that will enable this law’s implementation. While the rules are expansive, their requirement of parental consent for under-18-year-olds to join social media and gaming platforms could deliver a pragmatic age-gating regime. That said, the return of data localization requirements will place an avoidable burden on private enterprise, as also the overly stringent rules on data security and breaches. The draft rules do little to reassure critics who contend that government agencies will get a peek into personal data with rather few restraints.

India Privacy Rules  rules  act  mixed  draft  verification  valid  security  vigil  indias  edit  personal  bag  privacy  quick  data  mint

History of this topic

Gig Economy in India: Labour Rights Violations and Digital Exploitation
6 days, 22 hours ago

Gig Economy in India: Labour Rights Violations and Digital Exploitation

The Hindu  

Published : Mar 18, 2025 12:23 IST - 8 MINS READ Going to the bathroom could cost you your job. Misclassified as “independent contractors”, gig workers have no real power to refuse data collection, because refusal means a total lack of income. Control without accountability The DPDPA’s vague provision permitting data collection for “employment-related purposes” allows platforms to use opaque …

Nasscom flags concerns over data localisation
2 weeks, 4 days ago

Nasscom flags concerns over data localisation

New Indian Express  

Tech industry apex body Nasscom on Thursday said the new proposal in the draft Rules under the Digital Personal Data Protection Act to restrict transfer of personal data outside India "appears to be inconsistent with the spirit and the objectives of the Act and should be reconsidered." In its feedback on the draft Rules under the DPDP Act, which was …

Big Tech, Data privacy rules differ over online tracking of children on Net
2 weeks, 5 days ago

Big Tech, Data privacy rules differ over online tracking of children on Net

Live Mint  

New Delhi: Meta Platforms Inc and Google’s parent Alphabet Inc have raised concerns about Indian rules barring tech giants from monitoring internet browsing by children under 18 as it will make safety filters ineffective, according to three executives privy to the discussions. But, simply using age would not be enough to enforce safety filters, such as preventing unrelated adults from …

Privacy A Thing Of Past? Tax Officers Could Now Get Full Access To Digital Records
2 weeks, 5 days ago

Privacy A Thing Of Past? Tax Officers Could Now Get Full Access To Digital Records

ABP News  

Income tax officers in India will now be able to access the digital accounts of individuals if deemed necessary. The new norms of the Income Tax Bill, 2025 expand the authority of tax officers and allows them to gain access to the social media accounts, emails, trading platforms, online investments, and bank accounts of individuals if they suspect tax evasion. …

We finally have clarity on the role of consent managers under India’s privacy law
3 weeks, 6 days ago

We finally have clarity on the role of consent managers under India’s privacy law

Live Mint  

When India’s Digital Personal Data Protection Act was enacted in 2023, it was the first data protection law to reference an entity called the ‘Consent Manager.’ However, since the Act said very little about what this consent manager was supposed to do, speculation within the private sector was rife. In this case, the role of the consent manager would be …

Reliance Jio bats for localisation at IT ministry’s data protection consultation
1 month ago

Reliance Jio bats for localisation at IT ministry’s data protection consultation

Hindustan Times  

Reliance Jio backed the reintroduction of data localisation in the draft Digital Personal Data Protection Rules during a consultation convened by the information technology ministry in New Delhi, people aware of the matter said. During a consultation held on Tuesday, the telco’s executive voiced the company’s support for the creation of a committee that can make recommendations to the Centre …

Draft Digital Personal Data Protection Rules 2025: The Goal Remains Distant..?
1 month ago

Draft Digital Personal Data Protection Rules 2025: The Goal Remains Distant..?

Live Law  

The Digital Personal Data Protection Act was passed on August 11, 2023, amidst growing concerns over the misuse of personal data and its potential commodification. After sixteen months of enactment, on this January 3, 2025, the union government introduced the Draft Digital Personal Data Protection Rules for public consultation. While the Act and the draft rules purported to incorporate various …

India may reconsider e-commerce regulations in a post Trump world
1 month, 1 week ago

India may reconsider e-commerce regulations in a post Trump world

Live Mint  

India’s proposed comprehensive e-commerce policy that has drawn strong interest from global entities such as Amazon and Walmart may be put on the back-burner, two people aware of the matter said, as countries pause and reassess priorities in the wake of an eventful regime change in the US. The development also signals a more cautious approach to regulating the sector …

Data protection rules and Act, a net negative for privacy rights
1 month, 1 week ago

Data protection rules and Act, a net negative for privacy rights

The Hindu  

Around eight years since the judgment of the Supreme Court of India, in Justice K.S. Despite the Digital Personal Data Protection Act having been notified in August 2023, its provisions remain inoperative due to the delay in the notification of the Digital Personal Data Protection Rules Rules. ‘Significant Data Fiduciaries’, which are entities classified as such due to the volume …

Private companies can use Aadhaar infrastructure for identity checks again
1 month, 2 weeks ago

Private companies can use Aadhaar infrastructure for identity checks again

Live Mint  

As the Aadhaar case was reaching the Supreme Court, the Unique Identity Authority of India began to restrict private access to its authentication infrastructure. A new amendment to Aadhaar authentication rules could finally allow us to leverage our identity infrastructure to better unlock greater efficiencies in digital services. In fact, it is Section 8 that deals with authentication, and since …

Union Budget: IT ministry allocates ₹5 crore for Data Protection Board in FY26
1 month, 3 weeks ago

Union Budget: IT ministry allocates ₹5 crore for Data Protection Board in FY26

Hindustan Times  

The ministry of electronics and information technology has increased budgetary allocation for Data Protection Board of India by 2.5 times to ₹5 crore for FY26. The government had allocated ₹2 crore to meet the establishment and salary expenses of the Data Protection Board in FY25. In order to operationalise the Digital Personal Data Protection Act, 2023, which was notified in …

New Digital Rules Let You Wipe All Your Details Online
1 month, 3 weeks ago

New Digital Rules Let You Wipe All Your Details Online

Deccan Chronicle  

Hyderabad: Can a customer walk into a multinational company like Amazon and ask it to remove all her information from the company's database? With the draft Digital Personal Data Protection Rules, 2025 released in public domain seeking comments and feedback, the citizens can now look forward to a framework through which they can exercise their right to privacy. The rules …

‘Working closely with industry to understand implications of DPDP draft rules,’ says Nasscom
2 months, 1 week ago

‘Working closely with industry to understand implications of DPDP draft rules,’ says Nasscom

The Hindu  

Nasscom, the tech industry apex body, on Wednesday said it was working closely with the industry to understand the implications of the draft Rules in greater detail to develop recommendations aimed at strengthening the draft rules, to promote effective and practical compliance while reducing uncertainty and enabling innovation. ‘’Nasscom welcomes the government’s efforts to establish a robust data protection framework …

Bill to take charge of India’s digital destiny
2 months, 1 week ago

Bill to take charge of India’s digital destiny

Hindustan Times  

You wake up, pour yourself a coffee, and scroll through your phone. But what if every app and website you’ve ever used — Instagram, Amazon, or even that odd e-store — was quietly rifling through your personal data without asking you? India’s proposed Digital Personal Data Protection Rules, 2025 aim to ensure this nightmare doesn’t become your daily reality. Localisation …

How the draft rules for implementing data protection falls short
2 months, 1 week ago

How the draft rules for implementing data protection falls short

The Hindu  

After a long wait of 16 months, the Ministry of Electronics and Information Technology has released the draft rules for implementing the Digital Personal Data Protection Act, 2023. Lack of detail The draft rules propose operative guidance for critical mechanisms such as notice and consent to a user for data collection and processing, intimation of data breaches, collection of parental …

New US travel rules in 2025: Stricter ID requirements take effect
2 months, 1 week ago

New US travel rules in 2025: Stricter ID requirements take effect

India Today  

As 2025 begins, a wave of significant new laws is poised to reshape various aspects of life across the United States. These laws cover a wide range of issues, including advancements in artificial intelligence, updates to college admissions processes, healthcare policies for transgender youth, and stricter measures to protect personal data, such as revised ID regulations. ENHANCED DATA PRIVACY PROTECTIONS …

India’s data protection rules need some fine-tuning
2 months, 1 week ago

India’s data protection rules need some fine-tuning

The Hindu  

On January 3, 2025, the Ministry of Electronics and Information Technology released the much-anticipated Draft Digital Personal Data Protection Rules — a key moment in India’s journey to regulate digital personal data. The draft rules represent a departure from the earlier and controversial Personal Data Protection Bill, which many deemed was overly restrictive and even hostile to industry interests. While …

Digital Personal Data Protection Draft Rules: What Are the Sticking Points?
2 months, 2 weeks ago

Digital Personal Data Protection Draft Rules: What Are the Sticking Points?

The Quint  

In 2023, the Digital Personal Data Protection Act was passed by the Parliament. The Act passed after questions were raised with regard to the protection of data and its regulation within the Indian territory and the Act was passed to safeguard the private sphere of the citizens and to push through the idea of ‘digital economy’. In response to the …

Retired Justice B.N. Srikrishna to chair ID verification firm Equal’s advisory board
2 months, 2 weeks ago

Retired Justice B.N. Srikrishna to chair ID verification firm Equal’s advisory board

The Hindu  

Retired Supreme Court justice B. N. Srikrishna will chair the ID verification and data sharing platform Equal’s newly formed Advisory Board. Editorial | No secret affair: On the draft Digital Personal Data Protection Rules, 2025 The commitment of two firms enable “secure, compliant and consent-driven data sharing aligns closely with my work in safeguarding privacy and fostering trust in technology …

Rollout of Data Rules set for mid-2025: IT Minister
Trending News
2 months, 2 weeks ago

Rollout of Data Rules set for mid-2025: IT Minister

The Hindu  

The government is aiming to notify and begin implementing the Digital Personal Data Protection Rules, 2025 — currently in a draft state — by the middle of this year, Union Minister of Electronics and Information Technology Ashwini Vaishnaw said. “I don’t see too many amendments coming in the final notification beyond some tweaks.” While large firms are prepared to comply …

Well-equipped data protection board a must to enforce digital privacy laws, say experts
Top News
2 months, 2 weeks ago

Well-equipped data protection board a must to enforce digital privacy laws, say experts

Live Mint  

New Delhi: The draft rules for the Digital Personal Data Protection Act, published on Friday, have ignited discussions among legal and data privacy experts regarding the effective implementation of the law. “Provisions for criminal liability in cases of severe data breaches could go a long way in ensuring stricter compliance," said Nazneen Ichhaporia, partner at ANB Legal. On 3 January, …

Mint Explainer: The digital personal data protection Act, its rules, and roadblocks
Trending News
2 months, 2 weeks ago

Mint Explainer: The digital personal data protection Act, its rules, and roadblocks

Live Mint  

Companies waited nearly two years for the Indian government to frame rules for implementing the Digital Personal Data Protection Act—a threadbare legislation with a lot of queries on compliance mechanisms left unanswered. Concern: In emphasizing the “specified" purpose of the data, the legislators have created an overlap with the provisions of “Legitimate Use" under the DPDP Act, which allows data …

Mint Explainer: The digital personal data protection Act, its rules, and roadblocks
2 months, 2 weeks ago

Mint Explainer: The digital personal data protection Act, its rules, and roadblocks

Live Mint  

Companies waited nearly two years for the Indian government to frame rules for implementing the Digital Personal Data Protection Act—a threadbare legislation with a lot of queries on compliance mechanisms left unanswered. Concern: In emphasizing the “specified" purpose of the data, the legislators have created an overlap with the provisions of “Legitimate Use" under the DPDP Act, which allows data …

Explainer: Draft DPDP Rules 2025 aim to protect citizens’ data
Trending News
2 months, 2 weeks ago

Explainer: Draft DPDP Rules 2025 aim to protect citizens’ data

Live Mint  

New Delhi, Jan 8 The government floated draft Digital Personal Data Protection Rules 2025 last week for public consultation till February 18. Here is an explainer of the draft DPDP Rules 2025: What are the draft Digital Personal Data Protection Rules 2025? The Digital Personal Data Protection Rules 2025 drafted by the government provides for the manner of implementation of …

Data localisation only for specific purposes: IT secretary
2 months, 2 weeks ago

Data localisation only for specific purposes: IT secretary

Hindustan Times  

The draft Digital Personal Data Protection Rules will take a targeted approach to data localisation, affecting only specific categories of personal data and for specific purposes, information technology secretary S Krishnan said, adding that there are no easy solutions to verifying children’s age online. The current approach, however, empowers the government to specify countries where data cannot be transferred under …

ID tokenisation will help minors pass age test under new data rules: Ashwini Vaishnaw
2 months, 2 weeks ago

ID tokenisation will help minors pass age test under new data rules: Ashwini Vaishnaw

The Hindu  

The child verification system proposed in the draft Digital Personal Data Protection Rules, 2025 has been formulated in consultation with the tech industry, Minister for Electronics and Information Technology Ashwini Vaishnaw said on Tuesday, seeking to dispel the notion that this system will harm individual privacy. “The rules aim to safeguard personal data while driving growth and inclusivity,” Prime Minister …

No secret affair: on the draft Digital Personal Data Protection Rules, 2025
2 months, 2 weeks ago

No secret affair: on the draft Digital Personal Data Protection Rules, 2025

The Hindu  

The draft Digital Personal Data Protection Rules, 2025, is a long overdue advance in the direction of enforcing the fundamental right to informational privacy for Indians, affirmed by the Supreme Court of India in the landmark case, Justice K.S. The Digital Personal Data Protection Act, which these draft rules seek to enforce, was passed in Parliament over a year ago. …

India’s Digital Data Protection rules: A story of hits and misses
2 months, 2 weeks ago

India’s Digital Data Protection rules: A story of hits and misses

Live Mint  

The draft Digital Personal Data Protection Rules are finally with us and the long wait has for the most part been worth it. While the Act requires data fiduciaries to provide notice “in the event of" a personal breach, the rules state that intimation must be made “as soon as the Data Fiduciary becomes aware of it." Ever since Justice …

Parental nod, ID proof: How Modi govt plans to regulate digital access for minors
Top News
2 months, 2 weeks ago

Parental nod, ID proof: How Modi govt plans to regulate digital access for minors

India Today  

The Union government, at the beginning of the new year, unveiled a long-anticipated blueprint for India’s digital future: the draft Digital Personal Data Protection Rules, 2025. Social media platforms, gaming apps and e-commerce websites—all categorised as “data fiduciaries”—are now tasked with obtaining explicit, verifiable consent from users before collecting, processing or storing personal data. When the users in question are …

Data protection rules: India Inc says challenges remain
2 months, 2 weeks ago

Data protection rules: India Inc says challenges remain

New Indian Express  

NEW DELHI: The Ministry of Electronics and Information Technology has released the much-awaited draft rules for the Digital Personal Data Protection Act, 2025. Continued engagement from the government will be key to ensuring effective implementation.” Goldie Dhama, Partner at Deloitte India, said the draft offers important clarifications, mainly regarding verifiable consent for children’s data. After a gap of over 16 …

IT Ministry elaborates draft DPDP rules, seeks feedback by February 18
2 months, 2 weeks ago

IT Ministry elaborates draft DPDP rules, seeks feedback by February 18

New Indian Express  

NEW DELHI: The Ministry of Electronics and Information Technology on Sunday elaborated draft Digital Personal Data Protection Rules designed to protect citizens' rights under the Digital Personal Data Protection Act, 2023. The Data Protection Board, envisioned as a fully digital entity, will enable citizens to lodge complaints and resolve disputes online without the need for physical presence. The draft rules …

Digital Personal Data Protection Rules: Govt drafts stringent parental consent rules for social media users under 18
2 months, 2 weeks ago

Digital Personal Data Protection Rules: Govt drafts stringent parental consent rules for social media users under 18

Op India  

On 3rd December, the Government of India proposed detailed rules under the Digital Personal Data Protection Rules, 2025. One of the most talked-about aspects of the draft is the rule that makes verifiable parental consent mandatory for creating social media accounts and processing the personal data of children. As per the draft rules, every organisation that collects personal data must …

Draft Data Protection Rules Allow Authorities To Restrict Data Transfer To Foreign Countries
2 months, 2 weeks ago

Draft Data Protection Rules Allow Authorities To Restrict Data Transfer To Foreign Countries

ABP News  

The revisions suggested in the Digital Personal Data Protection Act draft state that authorities will have the right to restrict data transfer to foreign countries. The draft, made public on January 3, 2025, stated that the government will be permitted to place restrictions on cross-border data transfer to countries, entities, or persons in case of national security or privacy concerns. …

Experts cautiously welcome Digital Personal Data Protection Rules, 2025
2 months, 2 weeks ago

Experts cautiously welcome Digital Personal Data Protection Rules, 2025

The Hindu  

Experts working with the tech industry tentatively welcomed the draft Digital Personal Data Protection Rules, 2025, issued on Friday. “The draft rules provide some clarity on framing and displaying notices under the Digital Personal Data Protection Act, but they fall short in offering guidance on the mode of delivery or issuance—something well-defined under GDPR,” Ms. Suri said, referring to Europe’s …

Data protection rules balance regulation & innovation while safeguarding citizens’ rights: Vaishnaw
2 months, 2 weeks ago

Data protection rules balance regulation & innovation while safeguarding citizens’ rights: Vaishnaw

Live Mint  

New Delhi, Jan 4 The draft protection rules released by the government create a balance between regulation and innovation while completely protecting citizen rights, Union minister Ashwini Vaishnaw said on Saturday. The government issued draft rules for the Digital Personal Data Protection Act on Friday for public consultation till February 18. "All the entities covered under the Act will have …

Centre Notifies Draft Rules for Digital Personal Data Protection Act
Top News
2 months, 2 weeks ago

Centre Notifies Draft Rules for Digital Personal Data Protection Act

Deccan Chronicle  

New Delhi: The Ministry of Electronics and Information Technology on Friday notified the draft rules for the Digital Personal Data Protection Act, 2023. The Digital Personal Data Protection Act proposes to make parent’s verifiable consent and identification mandatory for the creation of a child's user account on online or social media accounts. The draft rules says the parents’ identity and …

DPDP Act will balance innovation and regulation, safeguard citizens' rights: IT Minister Vaishnaw
2 months, 3 weeks ago

DPDP Act will balance innovation and regulation, safeguard citizens' rights: IT Minister Vaishnaw

New Indian Express  

NEW DELHI: The draft protection rules released by the government create a balance between regulation and innovation while completely protecting citizen rights, Union minister Ashwini Vaishnaw said on Saturday. The minister said the final rules will be placed before Parliament in the monsoon session for approval and all entities handling data digitally will get two years to calibrate their systems …

Breach alert, parental nod in digital privacy rulebook
2 months, 3 weeks ago

Breach alert, parental nod in digital privacy rulebook

Hindustan Times  

The ministry of electronics and information technology on Friday evening released the draft Digital Personal Data Protection Rules for public consultation, setting the stage for operationalising India’s personal data protection regime more than 16 months after the act was notified in August 2023. These rules are the key to operationalising India’s Digital Personal Data Protection Act, which has been in …

Government releases Draft Digital Personal Data Protection Rules, no penalties specified
2 months, 3 weeks ago

Government releases Draft Digital Personal Data Protection Rules, no penalties specified

India TV News  

The government has unveiled the much-awaited Digital Personal Data Protection Rules Rules, 2023, omitting any specific mention of penalty for violation. The proposal comes more than a year after the Digital Personal Data Protection Act, 2023 was approved by Parliament. Key provisions in the draft rules The draft outlines procedures for obtaining explicit consent from individuals, including mandatory parental consent …

IT Ministry notifies draft rules under data protection law
2 months, 3 weeks ago

IT Ministry notifies draft rules under data protection law

The Hindu  

The Union government on Friday evening released the draft Digital Personal Data Protection Rules, 2025, which will enforce provisions of the Digital Personal Data Protection Act, 2023. The draft rules specify the nature of the notice that data fiduciaries must provide users when collecting their data: what data they’re collecting, why they’re collecting it, and “a fair account of the …

DPDP draft rules raise concerns on parental consent, national security checks
2 months, 3 weeks ago

DPDP draft rules raise concerns on parental consent, national security checks

Live Mint  

New Delhi: A draft of rules for India’s data protection law has proposed that parents mandatorily identify themselves before their children can join certain online platforms. “The public consultation is expected to spark significant discussions on various aspects of the rules,” said Dhruv Garg, partner at think-tank Indian Governance and Policy Project, adding that a critical area of focus will …

Children below 18 will need parents' consent to create social media account: Draft rules
Top News
2 months, 3 weeks ago

Children below 18 will need parents' consent to create social media account: Draft rules

Hindustan Times  

The draft of Digital Personal Data Protection rules, released by the central government on Friday, stated that children under the age of 18 will now require parental consent to create social media accounts. “A data fiduciary shall adopt appropriate technical and organization measures to ensure that verifiable consent of the parent is obtained before the processing of any personal data …

16 months on, Centre issues draft Digital Personal Data Protection Rules
2 months, 3 weeks ago

16 months on, Centre issues draft Digital Personal Data Protection Rules

Hindustan Times  

NEW DELHI: The ministry of electronics and information technology on Friday evening released the draft of Digital Personal Data Protection Rules – sixteen months after the law was notified in August 2023. These rules are key to operationalising the Digital Personal Data Protection Act that had been in the making since an expert group, formed under the chairpersonship of former …

Centre releases draft of Data Protection Rules; mandates parental consent for children's social media accounts
2 months, 3 weeks ago

Centre releases draft of Data Protection Rules; mandates parental consent for children's social media accounts

New Indian Express  

NEW DELHI: The government on Friday released the long-awaited draft of Digital Personal Data Protection Rules which specify that parent's verifiable consent will have to be obtained by social media or online platforms before children can create any account. "A Data Fiduciary shall adopt appropriate technical and organisational measures to ensure that verifiable consent of the parent is obtained before …

We should deal with technological transformations with utmost care
3 months ago

We should deal with technological transformations with utmost care

Live Mint  

Without a doubt, the biggest disappointment of 2024 has to be the fact that India’s data protection law is still not in force despite having managed to get through both houses of Parliament in record time in 2023. On the other hand, what is most gratifying is the pace at which India’s digital public infrastructure approach gained acceptance around the …

The legal gaps in India’s unregulated AI surveillance
3 months, 1 week ago

The legal gaps in India’s unregulated AI surveillance

The Hindu  

In 2019, the Indian government made headlines by announcing its intention to create the world’s largest facial recognition system for policing. The use of AI for surveillance has global parallels, often resulting in “dragnet surveillance”, a term that refers to indiscriminate data collection beyond just suspects or criminals. This article explores the legal frameworks, gaps, and concerns surrounding AI surveillance …

Anonymized medical data should be given an additional privacy shield
3 months, 1 week ago

Anonymized medical data should be given an additional privacy shield

Live Mint  

When I first saw the original blueprint of the Ayushman Bharat Digital Health Mission, the feature that really jumped out at me was its anonymizer module. This was the first time that a digital building block designed to de-identify personal data was being built directly into the digital workflow and I was excited by the possibilities that this offered. But, …

Privacy as priority: India can’t afford any further delay in notifying data protection rules
3 months, 1 week ago

Privacy as priority: India can’t afford any further delay in notifying data protection rules

Live Mint  

A few days ago, Signzy, a popular Know Your Customer verification service used by India’s top banks and fintech firms, was affected by a cyber attack that may have exposed the sensitive personal information of millions. India’s Digital Personal Data Protection Act was passed six years after the Right to Privacy verdict in 2017. The Digital India Act, touted as …

India to introduce new legal framework for data privacy, free data flow: Piyush Goyal
4 months ago

India to introduce new legal framework for data privacy, free data flow: Piyush Goyal

Live Mint  

New Delhi, Novemeber 22 : Union Minister Piyush Goyal announced that India is set to bring in a new legal framework to ensure data privacy while promoting the free flow of data among trusted global partners. The minister stated this during his address at the UK India Business Council's 'UK-India Technology Futures Conference' held in New Delhi on Thursday. In …

Discover Related