Digital Personal Data Protection Rules 2025 — Check provisions, implementation plan, penalties

The central government on 14 November notified its Digital Personal Data Protection Rules 2025 (DPDP Rules 2025), aimed at providing Indian citizens with control over their personal data and privacy in online spaces.

“Now, therefore, in exercise of powers conferred by sub-sections (1) and (2) of section 40 of the Digital Personal Data Protection Act, 2023 (22 of 2023), the Central Government hereby makes the following rules, … These rules may be called the Digital Personal Data Protection Rules, 2025,” the notification said.