Govt notifies rules for DPDP Act, putting India’s first digital privacy law into effect

CHENNAI: The government on Friday formally issued the rules under the Digital Personal Data Protection (DPDP) Act, marking the operational rollout of India’s first dedicated law governing digital privacy.

The notification brings clarity to how companies, government departments and digital service providers must collect, store and handle personal data. The rules outline detailed obligations for “data fiduciaries” — entities that process personal information — and establish clear rights for individuals, including the ability to give, withdraw or review consent for how their data is used.