India’s Draft DPDP Rules has been saved
Perspectives
India’s Draft DPDP Rules
Leading Digital Privacy Compliance
The release of the Draft Digital Personal Data Protection (DPDP) Rules, 2025 marks a pivotal moment in India’s effort to establish a robust data protection framework, following the enactment of the Digital Personal Data Protection Act (DPDPA), 2023. Issued by the Ministry of Electronics and Information Technology (MeitY), the draft Rules have been highly anticipated, coming after extensive consultations with industry experts over the past eighteen months. These Rules provide essential clarity on the obligations organisations must meet under the DPDPA.
The draft Rules aim to create a structured framework for organisations to handle personal data responsibly, while also giving individuals greater control over their personal information. But what do these draft Rules mean for businesses that have already started preparing for India’s data protection regime? The draft Rules define the responsibilities of data fiduciaries in a way that goes beyond typical provisions in global data protection regulations.