Digital Personal Data Protection Act The central government has notified the Digital Personal Data Protection (DPDP) Act, 2023, which addresses the need for a law to protect the data privacy of Indian citizens. The DPDP Rules, 2025 are a significant step in line with the Supreme Court's 2017 K.S. Puttaswamy v. Union of India judgment, which affirmed the right to privacy. The law, passed by Parliament in August 2023, requires companies to protect the digital data of Indian citizens, It contains exemptions for "the state and its instrumentalities" and imposes an anticipatory penalty on companies that violate these obligations. In August 2017, the Supreme Court ruled that privacy is a fundamental right July 2018: Retired Justice P.N. The committee headed by Srikrishna submitted its decision to remove the obligation of government bodies to provide "personal information" if the public interest outweighs the privacy rights of a public official. The amendment comes into force from 14.11.25. However, "data fiduciaries", who collect and use personal data, will have to comply with certain rules till November 2026. Report and draft Data Protection Bill December 2022: New draft bill prepared by IT Ministry August 2023: Parliament passes Digital Personal Data Protection Act, 2023 January 2025: Draft rules for implementing the Act came into force.
