Large parts of the Digital Personal Data Protection Act (DPDP), 2023 were notified on Friday (November 14, 2025), a significant step forward in the Union government’s compliance of the 2017 K.S. Puttaswamy v. Union of India judgement of the Supreme Court, affirming the right to privacy, and the need for a law to protect Indians’ data. The DPDP Rules, 2025, a draft of which was circulated in January, and mulled over for a significant period of time, were also notified.

The law, passed in August 2023 in Parliament , requires firms to safeguard Indians’ digital data, with exemptions for the “State and its instrumentalities,” and prescribes penalties for firms who breach these obligations. The law also weakens the Right to Information Act, 2005 , transparency activists have said, by re

See Full Page