The Government of India notified the Digital Personal Data Protection Rules, 2025, marking the full operationalisation of the Digital Personal Data Protection Act, 2023. The Act and Rules create a citizen-centred framework for responsible use of digital personal data, with obligations for Data Fiduciaries and rights for Data Principals. A central feature is the Data Protection Board of India, which oversees compliance, inquires into breaches and supports corrective action. The Rules provide for a digital-first Board, online complaints, consent notices, Consent Managers, breach-notification protocols and timelines for responding to data-principal requests. The highest penalty under the framework is up to Rs 250 crore for failure to maintain reasonable security safeguards. Official telecom data shows 101.78 crore internet subscribers in India as of 30 September 2025.
Government Notifies Digital Personal Data Protection Rules, 2025
The Government of India notified the Digital Personal Data Protection Rules, 2025, marking the full operationalisation of the Digital Personal Data Protection Act, 2023. The framework includes the Data Protection Board of India, consent-management provisions, digital proceedings, and penalties up to Rs 250 crore for specified violations.
Key facts
- Government of India notified the Digital Personal Data Protection Rules, 2025, marking full operationalisation of the DPDP Act, 2023.
- The Data Protection Board of India oversees compliance, inquires into breaches and supports corrective measures.
- Rules cover consent notices, Consent Managers, breach notification, digital-first Board proceedings and timelines for data-principal requests.
- The highest penalty is up to Rs 250 crore for failure to maintain reasonable security safeguards.
- Official telecom data records 101.78 crore internet subscribers in India as of 30 September 2025.
6-axis classification
Appears in these topics
Practice MCQ from this story
SolveTap an option below. Correct or incorrect feedback appears instantly.
The Digital Personal Data Protection Rules, 2025 operationalise key compliance and enforcement provisions of which parent legislation?
The Digital Personal Data Protection Rules, 2025 provide the operational framework for implementing the Digital Personal Data Protection Act, 2023. They set out processes and timelines related to compliance, user rights, data fiduciary duties, and the functioning of the data protection framework.
Source: Source details unavailable
Frequently asked questions
What did the Government notify under the DPDP framework?
The Government notified the Digital Personal Data Protection Rules, 2025, giving full effect to the Digital Personal Data Protection Act, 2023.
What is the role of the Data Protection Board of India?
The Board oversees compliance, inquires into personal-data breaches, supports corrective measures and functions through a digital-first process.
What is the maximum penalty under the framework?
The highest penalty is up to Rs 250 crore for failure of a Data Fiduciary to maintain reasonable security safeguards.
How many internet subscribers does India have in the latest official figure used here?
Official data states that India had 101.78 crore internet subscribers as of 30 September 2025.
Was this useful?
Share corrections or missing exam angles with the editorial team.
Send feedback