How the data protection draft rules fail

The Draft Rules for Implementing the Digital Personal Data Protection Act, 2023 (DPDP Act) in India

• The Ministry of Electronics and Information Technology (MeitY) has released draft rules for implementing the DPDP Act, 2023.

• The rules are open for public feedback until mid-February.

• The DPDP Act is India’s first comprehensive data privacy law, covering all spheres of commerce and industry.

• Critics have criticized the Act for not establishing a specialized regulator, not incorporating standard protections against government access to data, and excessive delegation of regulatory functions to the Central government.