New Delhi: India’s much-awaited Digital Personal Data Protection (DPDP) Rules, 2025, are finally here. The Ministry of Electronics and Information Technology (MeitY) notified the full operational framework on Tuesday, setting the wheels in motion for the country’s first full-fledged data protection regime. The rules bring in tighter safeguards, fresh compliance requirements, and a phased rollout that gives the industry up to 18 months to fall in line.

The framework, notified under the DPDP Act, 2023, includes obligations on how companies collect, store, and process personal data. The rules follow public consultations on the draft version released in January. The final version reflects several changes based on stakeholder inputs. From breach reporting deadlines to child-data rules, there’

See Full Page