Govt entities not exempted from responsibilities under DPDP Act: MeitY

The Indian government’s recent announcement regarding its own obligations under the Digital Personal Data Protection (DPDP) Act, 2023 signals a significant step towards comprehensive data protection in the country. At a workshop organized by the Ministry of Electronics and Information Technology (MeitY) on October 14, it was revealed that government entities will not be exempt from the responsibilities outlined for data fiduciaries under the DPDP Act. This means that, in the event of a data breach, government bodies will face the same penalties as private sector organizations.

This development is crucial for the evolving landscape of data privacy in India. Traditionally, government entities were often perceived to be outside the scope of stringent data regulations, but the DPDP Act holds all data fiduciaries—including the government—accountable for securing personal data. The move is seen as an important step towards establishing trust and transparency in the digital ecosystem, as government bodies will now be subject to the same scrutiny as private organizations.

The workshop, held at the India Habitat Centre in New Delhi, was attended by around 100 stakeholders and senior MeitY officials. Alongside this announcement, the ministry highlighted ongoing efforts to train its subsidiaries on data protection practices and streamline compliance mechanisms.

For marketing and digital businesses, this announcement strengthens the importance of robust data protection measures. Compliance will no longer be limited to private enterprises but will also extend to government institutions, leading to a more level playing field in terms of data responsibility. As digital ecosystems expand, the DPDP Act’s inclusive approach to accountability will have far-reaching implications for how data is handled across sectors in India.