Sansad TV

Perspective: Digital Personal Data Protection Rules, 2025 | 17 November, 2025

Sansad Tv

On the show today, we’re looking at the Digital Personal Data Protection (DPDP) Rules, 2025, notified by the government on 14th November 2025 completing the full operationalisation of the Digital Personal Data Protection Act, 2023. Together, the Act and the Rules establish a clear, citizen-centred framework for the responsible use of digital personal data, giving equal weight to individual rights and lawful data processing. To ensure broad stakeholder participation, the Ministry of Electronics and IT had released the draft DPDP Rules for public consultation and held discussions across Delhi, Mumbai, Guwahati, Kolkata, Hyderabad, Bengaluru and Chennai. Inputs from startups, MSMEs, industry bodies, civil society and government departments have shaped the final Rules giving India a practical, innovation-friendly data protection regime. Enacted by Parliament on 11 August 2023, the DPDP Act lays out a comprehensive structure for protecting digital personal data. It defines the obligations of Data Fiduciaries entities that handle such data and the rights and duties of Data Principals, or individuals. The Act follows the SARAL design Simple, Accessible, Rational and Actionable using plain language and illustrations to support clarity and compliance. They put in place a clear and practical system for protecting personal data in a rapidly expanding digital landscape. The Rules emphasise citizens’ rights and responsible data use by organisations. They aim to curb unauthorised commercial use of data, reduce digital harms, foster a safe space for innovation, and strengthen trust in India’s digital economy. To realise this vision, the DPDP Rules introduce several key provisions including an eighteen-month phased compliance period to help organisations upgrade their systems and adopt responsible data practices. They prescribe a simple, time-bound process for reporting personal data breaches. In the event of a breach, a Data Fiduciary must promptly inform all affected individuals. Every Data Fiduciary must also display clear contact information for data-related queries. Individuals can request access to their data, seek corrections and updates, or ask for data to be erased in certain situations. The Rules further establish an entirely digital Data Protection Board of India comprising four members. Citizens will be able to file complaints online and track their cases through a dedicated portal and mobile app. We’ll discuss these provisions in greater detail and understand how the DPDP Act and Rules strengthen privacy, enhance trust and support responsible innovation

Guests: