India Readies Overhauled National Data Privacy Rules

The article summarizes India’s Digital Personal Data Protection (DPDP) Act and the draft DPDP Rules published by the Ministry of Electronics and Information Technology (MeitY). The rules define operational requirements for data stewards—notifications, encryption in transit and at rest, deletion after three years of inactivity, protections for children’s data, and penalties (up to INR 200 crore) for non‑compliance—while retaining certain government exemptions; stakeholders can submit feedback by Feb 18 and will be given a transition period once the rules are activated.