Government Releases Draft Digital Personal Data Protection Rules 2025

– Facilitates implementation of Digital Personal Data Protection Act, 2023 (DPDP Act) – Aims to regulate handling of personal data of Indian citizens – SARAL framework ensures clarity and simplicity for ease of understanding

– Data Fiduciaries to ensure transparency and accountability – Consent Managers must register with Data Protection Board – Must manage and facilitate user consent in accordance with individual preferences

Safeguards and Data Breach Notifications: – Clear guidelines on safeguarding sensitive data, including children and persons with disabilities – Data Fiduciaries must notify Data Principals promptly about data breaches – Notifications must include breach nature, extent, timing, and potential consequences