The government has notified the Digital Personal Data Protection (DPDP) Rules, 2025, completing the operational framework of India’s new data protection law. These Rules, along with the DPDP Act, 2023, set out obligations for private data fiduciaries, introduce consent and notice requirements, and establish procedures for breach reporting and data retention.

Read more at Medianama