The Ministry of Electronics and Information Technology on Thursday notified the Digital Personal Data Protection Rules, 2025, bringing into effect the Digital Personal Data Protection Act passed in 2023.

The Rules outline how personal data is to be collected, processed and protected by both the state and private entities.

With the notification, the provision that amends the Right to Information Act – to bar the disclosure of personal information about public officials even when such disclosure may serve a larger public interest – also came into effect.

Critics have described this change as a serious threat to the principles of transparency and accountability that the Right to Information Act was designed to uphold.

Section 44(3) of the 2023 Digital Personal Data Protection Act

See Full Page