MeitY Unveils Draft Rules to Strengthen Digital Personal Data Protection

CIOTechOutlook Team | Monday, 06 January 2025, 05:50 IST

  •  No Image

The Ministry of Electronics and Information Technology (MeitY) detailed the proposed Digital Personal Data Protection (DPDP) Rules aimed at safeguarding citizens' rights as per the Digital Personal Data Protection Act, 2023. The Ministry announced that public feedback on the draft rules is available until February 18, 2025, through the MyGov portal.

The DPDP Act and the proposed regulations are designed to keep pace with swift developments in digital technologies, it stated. The Data Protection Board, designed to operate entirely digitally, will allow citizens to file complaints and settle disputes online without needing to be physically present. Individuals will be made aware of their rights and enabled to control their personal information via multilingual digital platforms.

Alongside online feedback, the Ministry intends to conduct organized consultations with civil society, industry, and government stakeholders to enhance the regulations. The completed regulations will be presented to Parliament for endorsement.

The proposed regulations seek to safeguard individual rights while avoiding disruptions to current digital activities. Organizations will have sufficient time to adhere to the new regulations, facing minimal compliance challenges. Data handling founded on previous consent will be permitted to proceed, with notifications provided to individuals, guaranteeing that their legal rights are maintained.

To protect children's personal information, Data Fiduciaries are required to establish procedures for acquiring verifiable parental consent. Moreover, startups will gain from lowered compliance obligations, while large Data Fiduciaries will face more stringent requirements.