Ministry of Electronics and Information Technology (MeitY) has drafted Digital Personal Data Protection (DPDP) Rules, 2025 to facilitate the implementation of DPDP Act, 2023. It aims to strengthen the legal framework for the protection of digital personal data by providing necessary details and an actionable framework.
The rules are designed to empower citizens in a rapidly growing digital economy. They seek to protect citizens’ rights in accordance with the DPDP Act, while achieving the right balance between regulation and innovation, so that benefits of India’s growing innovation ecosystem are available to all citizens and India’s digital economy. They also address specific challenges like unauthorised commercial use of data, digital harms and personal data breaches.
The rules place citizens at the heart of the data protection framework. Data fiduciaries must provide clear and accessible information about how personal data is processed, enabling informed consent. Citizens are empowered with rights to demand data erasure, appoint digital nominees, and access user-friendly mechanisms to manage their data.