Understanding the draft Data Protection Rules, 2025

MediaNama is gearing up for its roundtable discussion on the draft Digital Personal Data Protection Rules (DPDP Rules), 2025. We’ll delve into the operational challenges associated with the data protection rules including issues with data deletion due to inactivity, implementation of parental consent and platform liability concerns, and breach notification thresholds, timelines, and conflicts with other regulations. Scroll down for our list of top reads to familiarise yourself with The Digital Personal Data Protection Act, 2023 (DPDP Act), DPDP Rules and the various questions and concerns surrounding the two. 

Date:  February 7, 2025

Venue: Gulmohar Hall, India Habitat Center

Timing: 10 AM (registration and tea start at 9:30 AM)- 4 PM

Note: Given the overwhelming response to our event, registrations are currently on a waitlist. If any confirmed attendees cancel their registration, we will send you a confirmation email. Only confirmed attendees will be able to attend the event. We will send you a confirmation by Thursday, February 6.  You can join the discussion waitlist by registering here.

Advertisements

Reading List:

Understanding the Digital Personal Data Protection Act, 2023

• MediaNama’s complete guide to understanding the law. [Read]
• The consent, notice, and processing requirements the law imposes on companies. [Read]
• The “legitimate” cases when companies can process data without consent. [Read]
• How the data protection act approaches the protection of children’s data. [Read]
• The rights Internet users have under the data protection law—and the duties imposed on them as well. [Read]
• We explore how India’s data protection law approaches cross border data flows—switching from a whitelist approach to a blacklist policy framework. [Read]
• What happens during data breaches—and the kinds of penalties companies may face under the law. [Read]
• The various exemptions the law grants the government—including powers to exempt itself from following provisions and issue rules. [Read]
• We explore the government’s blocking powers under the law—and whether they impact speech, or a company’s operations in the country. [Read]
• We break down the functions and objectives of the Data Protection Board of India. [Read]

Understanding the draft rules:

Key provisions of the rules:

• Processing children’s data and verifiable parental consent [Read] 
• Obligations of significant data fiduciaries [Read]
• Reporting data breaches [Read]
• Obligations of a Consent Manager [Read]
• Data localisation [Read]
• Rights of data principals [Read]
• Exemptions from Data Protection [Read]
• Data Protection Board [Read]
• Obligations and powers of the government [Read]
• What’s missing from the Draft Data Protection Rules? [Read]

Key concerns with the draft rules:

• Issues with age verification mandate and children’s data [Read]
• Data requests by govt to data fiduciaries lack privacy safeguards and transparency [Read]
• Absence of health data protections [Read]
• Civil society asks for public consultations for the rules [Read]

Sectoral implications of the rules:

• How do the Draft DPDP Rules 2025 Affect Personalised Shopping Experiences on E-Commerce Platforms? [Read]
• Implications of DPDP Rules for the financial services industry [Read]

IT Minister Ashwini Vaishnaw’s comments on the Rules:

• Analysis of Vaishnaw’s comments [Read]
• Vaishnaw’s proposal to use virtual tokens as a solution for age verification [Read]

This discussion is being organised with support from Meta, Google, Snapchat, and Walmart and in partnership with CUTS, the Centre for Communication Governance at NLU Delhi, the Centre For Internet and Society, and the Internet Freedom Foundation.

Support our journalism:

For You

_{Images are for reference only.Images and contents gathered automatic from google or 3rd party sources.All rights on the images and contents are with their legal original owners.}