The draft Digital Personal Data Protection Rules, 2025, mark a significant step in India’s journey towards a robust framework for safeguarding personal data. These rules provide clarity for data fiduciaries and stakeholders on compliance with the Digital Personal Data Protection Act, 2023. The Rules address various issues, including consent, privacy notices, and data breaches. They aim to balance individual privacy protection with business innovation.
The Rules require data fiduciaries to provide clear, independent, and easily understandable privacy notices. These notices must detail information needed for informed consent decisions and include links to exercise rights. The Government has set out basic principles for privacy notices, offering businesses flexibility in designing consent management frameworks.
