DPDP Rules must clarify consent mechanisms and data breach reporting

India awaits the release of the Digital Personal Data Protection (DPDP) rules, expected by the end of the month. The rules will provide much-needed clarity on key aspects of the DPDP Act enacted in August, such as consent mechanisms, data breach reporting, and the role of consent managers.

The Digital Personal Data Protection rules are set to be released at the end of end month.

The DPDP Act provided for the processing of digital personal data in a manner that recognises both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes. “Although the Digital Personal Data Protection (DPDP) Act was enacted in August 2023, its implementation remains stalled due to the absence of supporting rules,” said Navaneeta Kanjilal, Independent Legal Consultant.

Read More