A step forward, but not without concerns

Moving a step closer towards the implementation of India’s maiden data protection law, the government has released the draft Digital Personal Data Protection Rules, 2025, for public consultation.

The rules make an earnest attempt to bring procedural clarity on some building blocks like notice to seek consent, consent managers, retention periods for certain businesses, certain data principal rights, and breach notification, but not without keeping alive concerns around verifiable parental consent, obligations of significant data fiduciaries, exemptions, and implementation timelines, and reviving some issues which we had hoped were put to rest, such as cross-border data transfers, and use of algorithms.

Read more

You may also like

Comments are closed.

More in IT