DATA PROTECTION RULES A WORK IN PROGRESS TOWARDS TRUST ECONOMY

WITH the rollout of the long-awaited data protection rules, the Digital Personal Data Protection Act, 2023 has entered the implementation stage, marking a shift in how personal information will be handled in India’s expanding digital ecosystem.

- 

The government has adopted a phased rollout: some provisions take effect immediately, while the full framework will be operational over the next 18 months. In this first phase, companies must publish privacy notices in clear, accessible language, appoint grievance officers, and establish data-retention and deletion systems. At the heart of the rules lies the principle of informed consent— entities must clearly state why they are collecting personal data and how they intend to use it. Added safeguards for children and persons with disabilities underline the intent to give individuals meaningful control over their digital footprints.