MeitY Weighs Faster Data Protection Compliance

India’s Ministry of Electronics and Information Technology is reviewing industry feedback before deciding whether to shorten the compliance timeline for the country’s new data protection rules.

Speaking at the 85th public meeting of Internet Corporation for Assigned Names and Numbers, MeitY Secretary S Krishnan said the government is consulting with industry on a proposal to reduce the compliance window for significant data fiduciaries from 18 months to 12 months under the Digital Personal Data Protection Act framework.

The proposal reflects a view within government that many large technology companies already follow strict privacy frameworks in other markets, including the General Data Protection Regulation. As a result, faster implementation in India may be feasible for companies already operating under global compliance standards.

However, industry stakeholders are seeking clarity on operational readiness, implementation costs, and regulatory alignment before committing to a shorter timeline. The government’s final decision will depend on the feedback received from companies and sector bodies.

Krishnan also addressed discussions around a proposal by the Government of Karnataka to restrict social media use for children under 16. He noted that issues related to social media platforms and online gaming fall under national jurisdiction and would need to be addressed at the central level.

The comments come as India’s digital ecosystem continues to expand rapidly. The country now has more than one billion internet users, up from around 200 million in 2014. With this growth, policymakers are placing greater emphasis on privacy protection, online safety, and secure digital transactions.

Krishnan emphasized the importance of India’s participation in global internet governance discussions. Forums like ICANN bring together governments, technology companies, civil society groups, and technical experts to shape policies that affect the global internet infrastructure.

For India, the key priorities include expanding internet access, ensuring multilingual availability, and strengthening data protection and cybersecurity frameworks. As the digital economy grows, the outcome of MeitY’s consultation on compliance timelines could play a major role in shaping how quickly India’s new privacy regime takes effect.