Proposed DPDP Regulations Emphasize Citizen-Centric Governance in India: PMO

New Delhi, Jan 7 (NationPress) The proposed Digital Personal Data Protection (DPDP) Rules, 2025, emphasize India's commitment to citizen-centric governance as they endeavor to protect personal data while fostering growth and inclusivity, the Prime Minister's Office (PMO) stated on Tuesday.

In a post on the X social media platform, the PMO highlighted Union Minister for Electronics and IT Ashwani Vaishnaw’s insights on the draft rules, which aim to safeguard individuals' personal data and empower citizens.

Vaishnaw pointed out that the draft DPDP regulations embody India's leadership in establishing global data governance standards.

“In contrast to certain international frameworks that heavily emphasize regulation, our strategy is practical and focused on growth. This equilibrium guarantees that citizens receive protection without hindering the innovative drive that propels our startups and enterprises. Small businesses and startups will encounter reduced compliance challenges,” the Union Minister remarked.

“When we discuss the future on a global scale, human-centric methodologies should take precedence.” These remarks by Prime Minister Narendra Modi at the recent United Nations Summit of the Future encapsulate India’s vision of prioritizing people.

This philosophy has been instrumental in our endeavors to formulate the Draft Digital Personal Data Protection (DPDP) Rules.

“Once finalized, the rules will bring the Digital Personal Data Protection Act, 2023 into effect, actualizing our pledge to secure citizens’ rights to personal data protection,” the minister further noted.

The regulations are crafted with simplicity and clarity, ensuring that every Indian, regardless of their technical expertise, can comprehend and exercise their rights, he added.

The Ministry of Electronics and Information Technology released the draft rules for the DPDP Act last week, which mandate that a Data Fiduciary must secure verifiable consent from a parent prior to processing any personal data of a child.

The Act was ratified in Parliament in August 2023, and the government is inviting feedback on the draft rules via the MyGov portal until February 18, 2025.

As per the draft rules, “A Data Fiduciary must implement suitable technical and organizational measures to obtain verifiable consent from the parent before processing any personal data of a child and must exercise due diligence to ensure that the individual identifying themselves as the parent is an identifiable adult.”

The identity must be validated using government-issued IDs or digital tokens linked to identity services like Digital lockers.