Legislative Comment on the Digital Personal Data Protection Rules, 2025
To operationalize the Digital Personal Data Protection Act, 2023 (DPDP Act) , the Ministry of Electronics and Information Technology drafted the Digital Personal Data Protection Rules, 2025 and released it through notification dated 3rd January, 2025 to invite public feedback (through objections and suggestions) via MyGov portal (https://mygov.in) till February 18, 2025. It is India’s first comprehensive data privacy legislation. In a quickly changing digital economy, these Rules seek to clarify consent management, child data protection, data retention limits, compliance procedures, data fiduciary duties, and the defence of data principals' rights provided under DPDP Act,2023. In order to guarantee that the framework complies with the constitutional values of privacy, accountability, and transparency, this comment raises issues around ambiguities, enforcement procedures, and inclusion while acknowledging the Rules' progressive goal.
This is an Open Access article distributed under the terms of the Creative Commons Attribution–NonCommercial 4.0 International (CC BY-NC 4.0) (https://creativecommons.org/licenses/by-nc/4.0/), which permits remixing, adapting, and building upon the work for non-commercial use, provided the original work is properly cited.