Recent Updates

The Ministry of Electronics and IT notified the Digital Personal Data Protection Rules, 2025 via Gazette Notification S.O. 846(E). The 23 Rules provide staggered enforcement: Board provisions (R.17-21) take immediate effect, Consent Manager registration (R.4) after 1 year, and all operational provisions (R.3, R.5-16, R.22-23) after 18 months.

The Ministry of Electronics and Information Technology published the draft Digital Personal Data Protection Rules, 2025 for public consultation. The draft Rules cover consent management, Significant Data Fiduciary obligations, security safeguards, Board procedures, and cross-border transfer mechanisms.

The Digital Personal Data Protection Act, 2023 received Presidential assent and was published in the Official Gazette as Act No. 22 of 2023. The Act establishes a comprehensive framework for digital personal data protection in India.

The Digital Personal Data Protection Bill, 2023 was passed by both Houses of Parliament. The Lok Sabha passed the Bill on August 7 and the Rajya Sabha on August 9, 2023.

The Digital Personal Data Protection Bill, 2023 was introduced in the Lok Sabha by the Minister of Electronics and Information Technology. This was the fourth iteration of India's data protection legislation.

The Ministry released the draft Digital Personal Data Protection Bill, 2022 for public consultation. This version represented a significant simplification from earlier iterations, including the withdrawal of the 2019 Bill.