Govt notifies Digital Personal Data Protection Rules

Implementation planned in phases spread over 12-18 months

- MPOST BUREAU

NEW DELHI: The government has released the long-awaited Digital Personal Data Protection Rules 2025 on Friday, which will be implemented in phases spread over 12-18 months.

The rules aim to give citizens control over their data, allow them to check for misuse, and protect their privacy in the online space.

However the rules will become completely operational only after 18 months.

“Now, therefore, in exercise of powers conferred by subsections (1) and (2) of section 40 of the Digital Personal Data Protection Act, 2023 (22 of 2023), the Central Government hereby makes the following rules, ... These rules may be called the Digital Personal Data Protection Rules, 2025,’ the notification said.

The rules are expected to help citizens avoid spam calls and unauthorised access to their personal data, video, and voice via any digital means.

Individuals under the rules get power to revoke their consent at any time they wish through consent managers.