The Centre has notified the Digital Personal Data Protection (DPDP) Rules, 2025, putting into full effect the DPDP Act, 2023 and establishing a comprehensive framework for safeguarding digital personal data. The Rules, along with the Act passed by Parliament in August 2023, are designed to provide a simple and citizen-centric approach to data protection.

The DPDP framework outlines the responsibilities of entities processing personal data (Data Fiduciaries) and the rights of individuals (Data Principals). It is built on seven principles: consent and transparency, purpose limitation, data minimisation, accuracy, storage limitation, security safeguards, and accountability. The government has adopted a “SARAL” approach – simple, accessible, rational and actionable – through the use of plain

See Full Page