Data Protection Bill

Industry leaders say phased deadlines through 2027 give them time, but the compliance effort will require major process redesign

The new DPDP rules will be introduced over the next 18 months to give organisations time to adapt to the guidelines.

Implementation planned in phases over 12-18 months

The new rules require informed consent along with easy provisions to revoke it for any personal data processing

Ecommerce, gaming, and social media intermediaries must erase dormant user data with prior notice

DPDP Act may also ask intermediaries to keep detailed meta data records

AI systems need ongoing monitoring and control mechanisms that can detect and prevent potential misuse or intended/unintended harm

The platforms are required to notify users at least 48 hours before data deletion, providing them the opportunity to log in or initiate contact to retain their information

With the Digital Personal Data Protection Act set to roll out, the government intensifies scrutiny on unauthorised Permanent Account Number data use by technology firms, aiming to protect citizens' pe

The government is likely to release draft rules under the Digital Personal Data Protection Act within a month, union minister Ashwini Vaishnaw said on Monday. The minister said the government has first worked on digital implementation of the Act and framed rules accordingly. "The framework is ready, and the draft rules for consultation are expected to be released within a month," Vaishnaw told reporters here. The minister said the final draft of the rules was reviewed last week, and it is expected to be in the public domain within a month.

Nigeria's government on Friday announced a fine of USD 220 million on Meta, saying its investigations found multiple and repeated violations of the country's data protection and consumer rights laws on Facebook and WhatsApp. A statement from Nigeria's Federal Competition and Consumer Protection Commission, or FCCPC, listed five ways that Meta violated data laws in the West African country, including by sharing the data of Nigerians without authorization, denying consumers the right to self-determine the use of their data, discriminatory practices as well as abuse of market dominance. "Being satisfied with the significant evidence on the record, and that Meta Parties have been provided every opportunity to articulate any position ... the Commission has now entered a Final Order, and issued a penalty against Meta Parties," FCCPC chief executive Adamu Abdullahi said in a statement. A spokesperson for Meta didn't immediately respond to a request for comment. Nigeria, which is Africa's

The Ministry of Electronics and Information Technology has urged tech firms to adopt advanced methods for obtaining parental consent while allowing them to determine the best practices independently

Drafting of rules under the data protection legislation is in advanced stage with industry-wide consultations slated soon, Union Minister Ashwini Vaishnaw said on Saturday, asserting that India will also look at doubling electronics production and adding jobs under the Modi 3.0 government. At the same time, the Minister for Electronics and IT assured that regulatory work will see "good continuity" and that the agenda on digital regulatory framework remains "intact". The timelines for semiconductor plants of Micron and Tata Group too are on track. The process of implementation of the Digital Personal Data Protection (DPDP) Act will be based on 'digital-by-design' principle, paving the way for a new way of working, and the work on creating this 'digital by design' platform is also moving in parallel. Such a platform or portal will be created in-house by the likes of NIC and DIC. The Parliament had passed the DPDP Act in August last year. The key piece of legislation aims to protect th

The framework will operate as a part of the Digital Personal Data Protection Act, of 2023, which was passed by the parliament in August

Amidst digital transformation, industry grapples with new privacy mandates

Only 17% of Indian organisations have listed the email IDs of customer care or other functions for queries with respect to data protection

Companies feel that the "timelines are too short," as the new DPDP Act will require a complete overhaul of their entire internal systems

The Data Protection Board is also likely to be set up in 30 days

Entities may be given about a year to tune their systems to comply with norms of Digital Personal Data Protection Act, 2023, Minister of State for Electronics and IT Rajeev Chandrasekhar said on Wednesday. Speaking to reporters on the sidelines of consultation with the industry, Chandrasekhar said the Data Protection Board and guidelines for the eight rules, including consent management, will be put in place within a month. "Industry wants some more time for age-gating, different timelines for transition for different data fiduciaries. We expect transition for most of the rules except age-gating will happen in 12 months from now," the minister said. The consultation was attended by about 125 people representing various companies, including Meta, Lenovo, Dell, Netflix, among others. The Digital Personal Data Protection Act, 2023, which comes after six years of the Supreme Court declaring 'Right to Privacy' as a fundamental right, has provisions to curb the misuse of individuals' da

Stringent legal obligation to prevent breaches has companies reviewing their security practices