Draft knowledge safety guidelines have obtained nearly 7,000 feedback: IT Ministry

The draft Digital Personal Data Protection Rules, 2025, have obtained 6,915 inputs and feedback from the general public, companies, and different stakeholders, the Ministry of Electronics and Information Technology instructed Parliament on Friday (July 25, 2025). The Ministry was responding to a question by Bharat Rashtra Samithi (BRS) MP Vaddiraju Ravichandra. 

The quantity of feedback displays the back-to-back session periods the federal government has held for the reason that draft was revealed in January, with a prolonged written remark interval, in addition to periods with State governments, personal trade, and different teams of invited stakeholders. The feedback are being held in confidence, the Ministry mentioned, indicating it might not launch them publicly as a way to enable stakeholders to supply candid submissions.

Long delay

The Digital Personal Data Protection Act, 2023, enacted over two years in the past, can not come into impact till the DPDP Rules are notified. Almost seven months on, the federal government has lengthy exceeded the weeks-long timeline that was indicated for the notification. The draft isn’t prone to be modified considerably, a key official had mentioned in February. 

However, as India and the U.S. negotiate a bilateral commerce settlement, with a significant give attention to the convenience of doing enterprise in India for expertise companies, the federal government has held off on publishing the ultimate Rules. In an off-the-cuff interplay with reporters this month, a senior IT Ministry official declined to offer any causes for the delay, or to offer an estimate of when the Rules may be anticipated to be enforced.

Consent managers

The DPDP Rules (and the mother or father Act) present for penalties towards companies that fail to take efficient measures to safeguard private info. They additionally put in place methods like consent managers, whereby people can maintain watch on which companies have their knowledge, and supply or withdraw consent for a few of them. The Act attracts out exclusions from penalties and key provisions for presidency businesses.

The legislation’s implementation has been awaited amongst privateness advocates, who hope that frequent knowledge breaches will lastly be met with accountability. The legislation has additionally drawn criticism from journalism our bodies and transparency activists because it accommodates no provisions for safeguarding journalistic work, and amends the Right to Information Act, 2005 to stop the disclosure of any private info that isn’t already revealed proactively below the legislation.