New Delhi, Nov 14: The government on Friday notified the Digital Personal Data Protection (DPDP) Rules 2025, setting out phased implementation over the next 12-18 months. The rules aim to empower citizens to control their personal data, protect privacy online, and curb misuse such as spam calls and unauthorized access to digital content.

Some provisions will come into effect immediately, while others—including registration and obligations of consent managers, notices from data fiduciaries, and major norms on personal data processing—will be implemented gradually.

The rules also establish a Data Protection Board, empowered to levy penalties based on breaches as outlined in the DPDP Act 2023, with fines of up to ₹250 per breach and a graded system to safeguard small businesses.

Citizens w

See Full Page