Digital Personal Data Protection Rules 2025 — Check provisions, implementation plan, penalties

The Digital Personal Data Protection Rules 2025 give citizens control over their personal data and privacy in online spaces and mitigate misuse. While some provisions will be implemented immediately, others will come in a phased manner over 12-18 months. “With the strict consent requirements, enhanced data security and breach notification protocols, and data retention and erasure being regulated India moves to a more global compliance level for data protection,” feels Sajai Singh, Partner at JSA Advocates & Solicitors. Probir Roy Chowdhury, Partner at JSA Advocates & Solicitors feels that the DPDP Rules notification is a “major step in operationalising India’s privacy framework”. He added that with the compliance roll-out planned, businesses need to shift focus from planning and sensitisation to implementation of obligations. “The next 18 months will be critical for achieving the right balance between user rights, regulatory certainty and business practicality,” Roy Chowdhury added. Read more