India Releases Draft Digital Data Protection Rules for Public Feedback

The proposed rules introduce stricter data privacy measures, parental consent requirements, and penalties for breaches, with feedback open until February 18, 2025.

The draft Digital Personal Data Protection Rules, 2025, were published by the Ministry of Electronics and Information Technology (MeitY), inviting public suggestions and objections until February 18, 2025.
Key provisions include stronger consumer control over personal data, such as the right to demand data deletion and transparency from companies on data collection practices.
Parental consent will be required for processing children’s personal data, including for creating social media accounts, with verifiable measures to ensure compliance.
The rules propose the establishment of a Data Protection Board, which will have civil court powers to address data breach complaints and impose penalties of up to ₹250 crore.
The implementation of the rules will be staggered, with provisions related to the Data Protection Board taking effect immediately and others, such as consent management, to follow later.