The Government of India is poised to release the finalised Digital Personal Data Protection (DPDP) Rules, 2025, within the next eight weeks, following an extensive two-month consultation period that sought industry feedback. The Ministry of Electronics and Information Technology (MeitY) had initially set the deadline for public comments on February 18 but extended it to March 5 to accommodate requests from various stakeholders for additional review time.
With the consultation period now concluded, a senior MeitY official has confirmed that there will be no further extensions. The official also stated that there are no significant changes expected from the draft version of the rules. Key concerns raised during the consultation—such as consent management, authority in control, data localisation, parental controls, and verifiable parents—have been reviewed and addressed.
Also Read :- India’s First Hydrogen Train Set to Roll Out Soon, Boasts World’s Most Powerful Engine
Key Provisions of DPDP Rules, 2025
The DPDP Rules, initially proposed in January 2025, aim to provide a structured framework for personal data processing in India. The rules define the responsibilities of data fiduciaries (organizations that process personal data) and outline the rights of data principals (individuals whose data is being collected). The framework mandates informed and specific consent mechanisms to ensure compliance with data protection norms.
This regulation builds upon the Digital Personal Data Protection (DPDP) Act, 2023, which was passed by the Lok Sabha in August 2023, replacing the previously fragmented data protection framework under Section 43A of the Information Technology Act, 2000.