Study OAS ·
Draft Data Protection Rules 2025
Overview
- Ministry of Electronics and Information Technology (MeitY) released the Draft Digital Personal Data Protection Rules, 2025.
- The draft rules aim to operationalize the Digital Personal Data Protection Act, 2023 (DPDP Act).
Key Features
- Data Localisation: Specifies that certain types of personal data must be processed within India.
- Significant Data Fiduciaries: Companies like Meta, Google, Apple, Microsoft, and Amazon will be classified as significant data fiduciaries based on the volume and sensitivity of personal data they process.
- Parental Consent: Requires verifiable parental consent for processing personal data of children.
- Safeguards: Proposes safeguards for citizens when their data is processed by the government.
- Public Consultation: Open for public comments until February 18, 2025.
Implementation and Impact
- Committee Formation: A committee will determine the types of personal data that cannot be transferred outside India.
- Lawful Processing: Processing of personal data by the government must be done in a lawful manner.
- Exemptions: The DPDP Act grants exemptions to the government for processing personal data on grounds of national security, public order, and friendly relations with other states.