India’s digital governance entered a decisive new phase with the notification of the Digital Personal Data Protection (DPDP) Rules, 2025. The Rules complete the operational framework of the DPDP Act, 2023, and place citizens firmly at the center of India’s data protection system. While announcing the notification, the government underlined that the goal is to build a system that enables technology to grow. Still, trust remains intact, noting that “India’s digital progress must be matched by strong protections that empower every citizen.” This moment marks the shift from broad principles to a practical, enforceable, and transparent regime for data privacy.

Before this framework, India depended on scattered guidelines and sector-specific rules to safeguard digital personal data. As digital

See Full Page