The Digital Personal Data Protection Rules (DPDP), 2025 were notified this week, kicking off the formation of the Data Protection Board of India (DPBI), and the legal framework for safeguarding the data of Indian people online. The DPDP Act itself was passed in Parliament in August 2023, and a draft of the Rules that were notified on Friday (November 14, 2025) were released for consultation in January.

What do the DPDP Act and Rules do?

The DPDP Act, 2023 is India’s version of data protection laws such as Europe’s General Data Protection Regulation (GDPR) and similar regimes in many other countries, such as Singapore’s Personal Data Protection Act, 2012. Like these regimes, the Act sets out some baselines for how companies (“data fiduciaries”) handle data of their users in India (“data

See Full Page