Data Protection Bill

Rollout of the Digital Personal Data Protection framework will make organisations more accountable and consequently raise their compliance standards, a top official of 63SATS Cybertech said. 63SATS Cybertech, Managing Director, CEO & CIO, Neehar Pathare said under the DPDP regime, cybersecurity will no longer remain just a technical function but a critical pillar of risk management and business resilience. "As India advances into a new era of digital governance with the rollout of the Digital Personal Data Protection framework, organisations are being held to significantly higher standards of accountability and compliance. In this environment, cybersecurity is no longer just a technical function but a critical pillar of risk management and business resilience," Pathare said. To advance cybersecurity adoption, 63SATS Cybertech has renewed its strategic title partnership with CyberSec India Expo 2026 for the second consecutive year. "Our continued partnership with CyberSec India ...

The Supreme Court on Monday issued a notice to the Centre on a plea challenging the constitutional validity of several provisions of the Digital Personal Data Protection (DPDP) Act, 2023. The plea, moved by The Reporters' Collective and renowned journalist Nitin Sethi, argues that the new data regime severely dilutes the Right to Information (RTI) Act and grants the Centre "sweeping powers" over personal data. A bench comprising Chief Justice Surya Kant and justices Joymalya Bagchi and Vipul M Pancholi, while agreeing to examine the legal complexities of the Act, refused to grant an interim stay on the impugned provisions. Representing the petitioners, advocate Vrinda Grover said that the Act lacks surgical precision in its attempt to protect privacy. "Instead of using a chisel, (the legislature) has used a hammer, and has thus rendered a body blow (to RTI), " the senior lawyer said. The petition said the DPDP Act creates a blanket bar on the disclosure of personal information, ..

Industry leaders say phased deadlines through 2027 give them time, but the compliance effort will require major process redesign

The new DPDP rules will be introduced over the next 18 months to give organisations time to adapt to the guidelines.

Implementation planned in phases over 12-18 months

The new rules require informed consent along with easy provisions to revoke it for any personal data processing

Ecommerce, gaming, and social media intermediaries must erase dormant user data with prior notice

DPDP Act may also ask intermediaries to keep detailed meta data records

AI systems need ongoing monitoring and control mechanisms that can detect and prevent potential misuse or intended/unintended harm

The platforms are required to notify users at least 48 hours before data deletion, providing them the opportunity to log in or initiate contact to retain their information

With the Digital Personal Data Protection Act set to roll out, the government intensifies scrutiny on unauthorised Permanent Account Number data use by technology firms, aiming to protect citizens' pe

The government is likely to release draft rules under the Digital Personal Data Protection Act within a month, union minister Ashwini Vaishnaw said on Monday. The minister said the government has first worked on digital implementation of the Act and framed rules accordingly. "The framework is ready, and the draft rules for consultation are expected to be released within a month," Vaishnaw told reporters here. The minister said the final draft of the rules was reviewed last week, and it is expected to be in the public domain within a month.

Nigeria's government on Friday announced a fine of USD 220 million on Meta, saying its investigations found multiple and repeated violations of the country's data protection and consumer rights laws on Facebook and WhatsApp. A statement from Nigeria's Federal Competition and Consumer Protection Commission, or FCCPC, listed five ways that Meta violated data laws in the West African country, including by sharing the data of Nigerians without authorization, denying consumers the right to self-determine the use of their data, discriminatory practices as well as abuse of market dominance. "Being satisfied with the significant evidence on the record, and that Meta Parties have been provided every opportunity to articulate any position ... the Commission has now entered a Final Order, and issued a penalty against Meta Parties," FCCPC chief executive Adamu Abdullahi said in a statement. A spokesperson for Meta didn't immediately respond to a request for comment. Nigeria, which is Africa's

The Ministry of Electronics and Information Technology has urged tech firms to adopt advanced methods for obtaining parental consent while allowing them to determine the best practices independently

Drafting of rules under the data protection legislation is in advanced stage with industry-wide consultations slated soon, Union Minister Ashwini Vaishnaw said on Saturday, asserting that India will also look at doubling electronics production and adding jobs under the Modi 3.0 government. At the same time, the Minister for Electronics and IT assured that regulatory work will see "good continuity" and that the agenda on digital regulatory framework remains "intact". The timelines for semiconductor plants of Micron and Tata Group too are on track. The process of implementation of the Digital Personal Data Protection (DPDP) Act will be based on 'digital-by-design' principle, paving the way for a new way of working, and the work on creating this 'digital by design' platform is also moving in parallel. Such a platform or portal will be created in-house by the likes of NIC and DIC. The Parliament had passed the DPDP Act in August last year. The key piece of legislation aims to protect th

The framework will operate as a part of the Digital Personal Data Protection Act, of 2023, which was passed by the parliament in August

Amidst digital transformation, industry grapples with new privacy mandates

Only 17% of Indian organisations have listed the email IDs of customer care or other functions for queries with respect to data protection

Companies feel that the "timelines are too short," as the new DPDP Act will require a complete overhaul of their entire internal systems

The Data Protection Board is also likely to be set up in 30 days