INFORMATION TECHNOLOGY
India’s New Digital Privacy Law: The DPDP Act and Rules Explained
Our latest blog post presents a structured breakdown of the provisions that form India’s new digital privacy framework.
December 1, 2025
Our latest blog post presents a structured breakdown of the provisions that form India’s new digital privacy framework.
We examine whether exemptions under the Fourth Schedule of the recently notified DPDP Rules are justified or excessive, and whether India has strayed from global best practices in protecting children online.
The Digital Personal Data Protection Act, 2023 (“DPDP Act”) introduces a significant shift in India’s data governance landscape by establishing a comprehensive, rights-based framework for regulating the processing of digital personal data.
India’s new data protection framework raises questions not only about the identity of a consent manager, but also about its business model and intended purpose.
This piece examines the data erasure mandate under the new DPDP Rules, 2025, arguing that the Data Principal, not an automated timeframe, should control the fate of personal data.