DPDP Rules to Be Notified by September 28: IT Minister Vaishnaw

Union IT Minister Ashwini Vaishnaw has confirmed that the long-awaited Digital Personal Data Protection (DPDP) Rules are ready and will be officially notified by September 28, 2025. Speaking at a pre-event for the AI Impact Summit, the minister said the rules had been finalized after an extensive stakeholder consultation process and are now in the final stages of publication.

“The DPDP rules are ready and will be published in a few days from now,” Vaishnaw stated, emphasizing the government’s commitment to strengthening India’s data governance ecosystem.

The DPDP Act, passed by Parliament and signed into law in August 2023, provides a legal framework for protecting citizens’ digital personal data. It regulates how companies collect, store, and process such data, with a strong focus on user consent, accountability, and privacy safeguards.

The soon-to-be-released rules are expected to detail compliance requirements, enforcement mechanisms, and penalty structures for violations. They will also outline the obligations of entities classified as data fiduciaries and significant data fiduciaries, ensuring stricter oversight of organizations handling large volumes of sensitive data.

The move marks a crucial step in operationalizing India’s data protection regime, aligning it with global standards while addressing the country’s unique digital ecosystem.