Union minister Ashwini Vaishnaw said on Monday told reporters on Monday that the central government may release draft rules under the Digital Personal Data Protection Act within a month.
"The framework is ready, and the draft rules for consultation are expected to be released within a month," Vaishnaw said, adding that the final draft was reviewed last week.
The Digital Personal Data Protection Act, 2023, outlines the rights of individuals and the obligations of businesses handling personal data. It essentially gives individuals the right to access, correct, or delete their personal information, while businesses must obtain explicit consent for data processing and implement robust security measures. The Act also places restrictions on cross-border data transfers, aiming to protect data from unauthorized access.
To enforce the law and address grievances, a dedicated Data Protection Authority has been established, and non-compliance with the Act can result in hefty penalties.
Given the high degree of access of consumer data available to companies, brands, and advertisers, the legislation seeks to strike a balance between protecting privacy and facilitating legitimate data processing, shaping India's digital landscape for years to come.