Draft Digital Personal Data Protection Rules, 2025

On 3rd January 2025, the Centre proposed the draft Digital Personal Data Protection Rules, 2025, introducing measures for protecting personal data, especially for children and persons with disabilities. Public feedback is invited until 18th February 2025 through MyGov.in.

Key Points

Parental Consent for Children: Social media accounts for children will require "verifiable" consent from a parent or guardian.
Data Processing for Vulnerable Groups: Personal data processing of children and persons with disabilities will occur only with verifiable consent from their guardians.
Data Fiduciary Obligations: Companies must implement technical measures to verify the consent of identifiable adults acting as parents or guardians.
Enhanced Consumer Rights: Users can demand data deletion, ask for the reasons behind data collection, and exercise greater control over their data.
Transparency and Accountability: Organizations must ensure transparency in handling personal data and face penalties of up to ₹250 crore for breaches.