Draft data protection rules receive almost 7,000 comments

The Ministry of Electronics and Information Technology has told the Parliament that the draft Digital Personal Data Protection Rules, 2025, have so far received 6,915 inputs and comments from the public, firms, and other stakeholders.

The Ministry was responding to a query by Bharat Rashtra Samithi (BRS) MP Vaddiraju Ravichandra in Parliament on Friday (July 25).

The DPDP Act provides a comprehensive framework for the protection of digital personal data of individuals while making data fiduciaries accountable for personal data breaches. Data fiduciaries are required to implement appropriate technical and organizational measures to prevent personal data breaches by taking reasonable security safeguards, Jitin Prasada, Minister of Electronics and IT, said in the response.

The comments reflect the back-to-back consultation sessions the government has held since the draft was published in January, with a lengthy written comment period, as well as together with sessions held with State governments, private industry, and other groups of invited stakeholders.

The Ministry further said that the comments are being held in confidence, indicating it would not release them publicly in order to allow stakeholders to offer candid submissions.

The Digital Personal Data Protection Act, 2023, which was enacted over two years ago, cannot come into effect until the DPDP Rules are notified. The government has long exceeded the weeks-long timeline that was indicated for the notification. The draft is not likely to be modified significantly, a top official had said earlier this year.