India is currently in the process of creating a new data protection framework comprising legislation and subordinate legislation:
- The Digital Personal Data Protection Act, 2023 was passed in August 2023, and is expected to come into force this year;
- The Digital Personal Data Protection Rules, 2025 have recently been issued in draft form, for consultation.
To know more, read “Draft Digital Personal Data Protection Rules, 2025: A Review” by Siddhartha George and Harini Sudersan from Poovayya & Co (Lexing India), which examines key aspects of the Indian Draft Rules and Act that businesses should be aware of.