Overview

• The draft Digital Personal Data Protection Rules, 2025, were published by the Ministry of Electronics and Information Technology (MeitY), inviting public suggestions and objections until February 18, 2025.
• Key provisions include stronger consumer control over personal data, such as the right to demand data deletion and transparency from companies on data collection practices.
• Parental consent will be required for processing children’s personal data, including for creating social media accounts, with verifiable measures to ensure compliance.
• The rules propose the establishment of a Data Protection Board, which will have civil court powers to address data breach complaints and impose penalties of up to ₹250 crore.
• The implementation of the rules will be staggered, with provisions related to the Data Protection Board taking effect immediately and others, such as consent management, to follow later.