India’s Latest Data Protection Policy. Digital Personal Data Protection Rules 2025 By Sandhaan Pramaan.
Introduction. • New data protection framework notified (2025) • Implements DPDP Act 2023 • Focus: citizen control & responsible data use.
Objectives. ✔ Empower individuals with data rights ✔ Define obligations for data handlers ✔ Improve privacy & digital trust ✔ Gradual phased rollout.
Core Concepts. • Data Principal: individual • Data Fiduciary: entity processing data • Consent Manager • Significant Data Fiduciary.
Citizen Rights. ✔ Access, correct & erase data ✔ Withdraw consent ✔ Nominate representative ✔ Breach notification rights.
Obligations of Data Fiduciaries. • Collect minimal data • Clear consent • Implement security controls • Breach reporting • DPO appointment.
Security & Breach Protocol. • Encryption, masking, monitoring • Notify users • Report breaches within 72 hours.
Penalties. • Fines up to ₹250 crore • Mandatory audits • Oversight by Data Protection Board.
Conclusion. DPDP 2025 strengthens privacy, transparency, and accountability. Sandhaan Pramaan supports compliance & clarity..