MeitY feedback period for DPDPA draft extended till March 2: Report

The Ministry of Electronics and Information Technology (MeitY) has reportedly extended the public feedback period on draft rules for the Digital Personal Data Protection Act (DPDPA) till March 2, 2025. Previously, February 18 was set as the last date but following concerns from industry stakeholders, the consultation period has been extended, said the news report.   

MeitY unveiled the much-anticipated draft rules for DPDP Act on January 3. This development came 16 months after the Act's initial notification in August 2023, marking a crucial milestone in the country's journey towards comprehensive data privacy legislation. 

The Digital Personal Data Protection Act, 2023, outlines the rights of individuals and the obligations of businesses handling personal data. It essentially gives individuals the right to access, correct, or delete their personal information, while businesses must obtain explicit consent for data processing and implement robust security measures. 

The Act also places restrictions on cross-border data transfers, aiming to protect data from unauthorised access. 

To enforce the law and address grievances, a dedicated Data Protection Authority has been established, and non-compliance with the Act can result in hefty penalties.

Given the high degree of access of consumer data available to companies, brands, and advertisers, the legislation seeks to strike a balance between protecting privacy and facilitating legitimate data processing, shaping India's digital landscape for years to come. 

One of the most notable aspects of the draft rules is the proposed staggered implementation approach. Five rules related to the selection and functioning of the Data Protection Board (DPB) are set to come into force immediately, while other rules will be effective at a later date. This phased approach allows organizations to adapt gradually to the new requirements.