The Ministry of Electronics and IT (MeitY) Friday notified the long awaited data protection rules, paving the way for India to have a functional privacy law, eight years after the Supreme Court ruled it as a fundamental right. The notification of the rules comes over two years after the Digital Personal Data Protection Act received the President’s assent in August 2023.

While the law is now operational, only parts of it are currently in force, as some of the most important protections available to citizens under the law will take longer – between twelve to eighteen months – to be implemented. For instance, the requirement for entities to seek informed consent from users before processing their personal data, using their personal data only for specified legitimate uses, and for entities to

See Full Page