Nasscom and the Data Security Council of India (DSCI) announced on Friday that the government’s notification of the Digital Personal Data Protection (DPDP) Rules 2025 signifies a crucial step in enhancing India’s personal data protection framework.
With the implementation of these rules, industry stakeholders now have a clearer, actionable roadmap for compliance. “We commend the Ministry of Electronics and Information Technology for adopting a constructive, consultative approach throughout the drafting process,” said Nasscom-DSCI. The finalized rules largely retain the structure and policy decisions from the draft framework while introducing a transparent phased commencement schedule.
Key improvements include clarified verifiable consent definitions and well-defined provisions for children and individuals with disabilities. The provisions concerning state processing remain consistent with the draft, featuring refined wording that enhances readability while maintaining the original intent.
Nasscom-DSCI noted that certain industry concerns raised during consultations stem from the Act’s foundational architecture and could not be resolved through subordinate legislation. These concerns involve the structure of parental consent, the statutory age for children, and the requirement to notify all personal data breaches. Moving forward, the focus will be on supporting practical and proportionate implementation that aligns with legal objectives.
The organization also highlighted the need to develop mechanisms for international data transfers that support interoperability and facilitate cooperation with key trading partners.
On Friday, the government officially notified the rules for the DPDP Act, thereby operationalizing India’s first digital privacy law and beginning the compliance countdown for companies handling user data. As per the new framework, social media platforms, online gateways, and other organizations managing personal data must provide users with detailed explanations of the information collected and clarify its intended use.
The article was structured to convey key developments while upholding the standards of journalistic integrity.
