SFLCin has released its initial comments on India's first comprehensive data protection regime. This statement was originally published on sflc.in on 14 November 2025. The Government of India passed ...

The DPDP Act 2023 and Rules 2025 overhaul personal data protection in India, introducing strict consent, retention, and security requirements for ...

The DPDP Rules, 2025, introduce obligations that come into force in May 2027, creating new expectations for how organisations collect, use, secure, and delete personal data.

The Government of India has officially notified the Digital Personal Data Protection (DPDP) Rules, 2025, putting into full effect the DPDP Act, 2023. Together, the Act and Rules create a clear, ...

The Digital Personal Data Protection framework in India is now operational with the notification of the 2025 Rules, creating ...

The Ministry of Electronics and Information Technology has notified the Digital Personal Data Protection (DPDP) Rules, 2025, a crucial step towards safeguarding personal data in the digital age. The ...

The proposed rules outline that data fiduciaries (entities that determine how personal data is processed) will need to provide data principals (end users whose data they are collecting) necessary ...

November 14 was an important date in India’s digital journey, marking a milestone by bringing to life a comprehensive framework that fundamentally changes how c ...

SFLCin said that while the rules address many critical aspects of data processing and protection, certain ambiguities persist. This statement was originally published on sflc.in on 15 January 2025.