Digital Personal Data Protection Rules, 2025: The government has released an initial draft of new rules to protect people's digital data. There is no mention of any punitive action for violation. According to the draft, children and differently-abled people will have to get permission from their parents to open social media accounts. The draft clearly states that the security of the data will be the responsibility of the platform. You can give your opinion or suggestion regarding the draft on the MyGov portal till 18 February 2025.

Companies may be fined and will have to give this information.

According to the draft of Digital Personal Data Protection Rules, this law will be applicable to everyone, whether it is a government institution or a private company. Apart from this, certain companies will have to follow other rules, such as checking their data security system every year. If a company does not follow these rules, then it can be fined. Companies will have to tell you what information they are collecting from you, why, and how.

Consent will have to be taken for the use of information.

According to the draft, companies will have to obtain your consent before using your information. Also, you will have the right to view, change, or delete your information. It is important to keep the language clear and simple. Platforms will have to appoint a consent manager, and for that registration will have to be done with the board. Necessary arrangements, encryption, and other technical upgrades will have to be done for data security. The use of data will be decided along with backup, login and the entire process will have to be monitored.

Data will have to be deleted from time to time.

According to the draft, immediate action will have to be taken on the information or information of data breach. This information will have to be shared with the government agency. Apart from the legally required data, other data will have to be deleted from time to time. It is necessary to give information 48 hours before deletion. Companies will update their data protection officer and rules on their website, and app. At the same time, data will not be transferred outside the country, as well as information will have to be given. There will be no exemption from the law for the processing of data.

Necessary technical upgrades will have to be done for verification.

According to the draft, necessary technical upgrades will have to be done for information about the age of children and verification so that the data of children is not misused. The company will have to ensure that the accounts of children are not created with wrong information. In the case of a child, the organization handling the data will have to ensure that the person giving consent is an adult and the parent of the child by using a reliable identity document or a digital token linked to such a document.

Disclaimer: This content has been sourced and edited from ZEE Business Hindi. While we have made modifications for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.