The central government on Friday released the long-awaited Digital Personal Data Protection (DPDP) Rules 2025. These rules will be implemented in a phased manner over the next 12 to 18 months. According to PTI, they aim to give citizens control over their personal data, enable them to identify data misuse, and strengthen online privacy.
The rules will be fully implemented after 18 months.
The notification issued by the government states that these rules will be called the Digital Personal Data Protection Rules, 2025 and have been made under Section 40 of the Digital Personal Data Protection Act, 2023. However, all the provisions will be fully implemented only after 18 months. Citizens will get relief from spam calls and unauthorized data access. The new rules are expected to provide relief to citizens from problems like spam calls, unauthorized use of video or voice, and unauthorized access to personal data. Citizens will now have the right to withdraw their consent at any time, for this the facility of consent manager has been provided.
Which rules will apply when?
Some provisions will come into effect immediately. Rules regarding the registration and responsibilities of consent managers will come into effect after one year. Rules regarding data processing and the operation of data platforms will come into effect after 18 months. The new rules also define the composition and functioning of the Data Protection Board. This board will operate entirely digitally, without requiring physical presence. The board will have the authority to impose penalties in cases of data breaches, as per the DPDP Act 2023.
Provision for penalty up to Rs 250
The Act provides for penalties of up to ₹250 per violation for data fiduciaries (data processing entities), but a graded penalty system has been put in place to protect small businesses. Data breaches will be strictly enforced, and platforms will be required to report them promptly. If a platform becomes aware of a data breach, it must notify all affected users in simple, clear, and concise language, and without delay.
