The draft Digital Personal Data Protection Rules issued by the Ministry of Electronics and Information Technology aims at safeguarding citizens’ rights for the protection of their personal data. The ministry, in a statement, said that these rules seek to operationalise the Digital Personal Data Protection Act, 2023 (DPDP Act), in line with India’s commitment to create a robust framework for protecting digital personal data. The draft rules are based on wide-ranging inputs gathered from various stakeholders and a study of global best practices.
The Ministry has invited comments on the draft rules from the public and stakeholders till the 18th of February, 2025, through the MyGov platform, in line with the Government’s commitment to adopt an inclusive approach to law-making. Consent mechanisms, grievance redressal, and the functioning of the Data Protection Board are all envisaged as “born digital”, to ensure ease of living and ease of doing business. From processing complaints to interacting with data fiduciaries, workflows are optimised to ensure speed and transparency. This reflects India’s forward-looking approach to governance and builds trust between citizens and data fiduciaries.
The government has said that these rules are designed to empower citizens in a rapidly growing digital economy. They seek to protect citizens’ rights in accordance with the DPDP Act while achieving the right balance between regulation and innovation. The rules also address specific challenges like unauthorised commercial use of data, digital harms, and personal data breaches.
The rules empower citizens by giving them greater control over their data. Provisions for informed consent, the right to erasure, and grievance redressal enhance trust in digital platforms. Recognising the importance of citizen engagement, the government has also planned a comprehensive awareness campaign. These initiatives will educate citizens about their rights and responsibilities under the new framework, fostering a culture of data responsibility. The draft rules are a testament to India’s commitment to ensuring the protection of the digital personal data of citizens while securing innovation-driven and inclusive growth.
