Govt Likely To Release Finalised DPDP Rules In Next Eight Weeks

SUMMARY

The consultation period for public comments on draft DPDP Rules 2025 has ended after extending it to nearly two months

The Centre is set to review comments and release the finalised rules in the upcoming eight weeks or so

As per a MeitY official doubts around consent management, authority in control, data localisation, parental control and verifiable parents have been addressed

The window for public comments on draft Digital Personal Data Protection Rules, 2025 (DPDP Rules) has closed, ending a two-month consultation period during which the government sought feedback from various stakeholders. The Centre will now review the comments and may reportedly release the finalised rules in the next eight weeks or so.

A report by the Hindu Businessline, citing government sources, said that there will be no major change in the draft and the deadline for public consultations will not be extended further.

The Ministry of Electronics and Information Technology (MeitY) last extended the public feedback from February 18 to March 5, following requests from multiple sectors for additional time to review the draft in detail and provide comprehensive feedback.

“No requests have come for any extension, and we have received quite a bit of feedback and also done a lot of in-person sessions. I don’t think there will be major changes from what we had published earlier,” the report further said, quoting a senior MeitY official.

The official further said that doubts regarding consent management, authority in control, data localisation, parental control and verifiable parents have all been received and addressed.

MeitY initially proposed the rules outlining data fiduciaries (entities that determine how personal data is processed) the need to provide data principals (end users whose data they are collecting) necessary details for them to give specific and informed consent for the processing of their personal data in January this year.

The initial deadline for the public consultation on the draft rules was till February 18.

To note, the rules for data privacy and security in India so far functioned under the Digital Personal Data Protection (DPDP) Act, 2023, passed by the Lok Sabha in August 2023. This was aimed at replacing the data protection rules that were largely enforced through Section 43A of the Information Technology Act, 2000.