DPDP Act Rules & IT Amendments Set for Release Within 45 Days

New rules for the Digital Personal Data Protection Act (DPDPA) and amendments to the IT rules are expected within the next 45 days. Reports suggest that the Data Protection Board will also be established during this timeframe.

The DPDPA rules, which have faced delays will enhance the current data privacy framework. Meanwhile, the IT rules amendments will tackle issues such as AI-driven misinformation and deepfakes, bridging the gap until a comprehensive Digital India Act is enacted.

The DPDP Act includes specific protections for children and individuals with disabilities. Businesses must comply with these regulations to avoid penalties of up to Rs 200 crores. Under the DPDP Act, processing a child’s personal data requires parental consent and the same applies to individuals with disabilities and their guardians. Additionally, the Act prohibits tracking or monitoring children’s behaviour and targeted advertising aimed at them.

Union Minister Ashwini Vaishnaw recently said, “Drafting of DPDP Rules is in very advanced stage. We will start the industry consultation now. Whatever extensive consultations will be required; we will do those. We won’t rush through. We will prefer as consultative a process as we can like you saw in the Telecom Bill and the DPDP Act.”

The DPDP Rules are a top priority, he said. “AI (artificial intelligence) is also a very important item. But first, we have to make sure that DPDP in its digital form comes into shape,” he added.

The Digital Personal Data Protection Act, enacted in 2023 establishes comprehensive regulations for safeguarding personal data privacy and security in India’s digital landscape. It sets detailed rules for how organisations and entities collect, process, store and share personal data.

Introduced in 2022, the DPDP Bill was revised and approved by both houses of Parliament in August 2023. The provisions of the Act have yet to be enforced but are anticipated to come into effect in July 2024 following a government notification.