India: Opened consultation on Digital Personal Data Protection Rules 2025 including cross-border data transfer regulation

On 3 January 2025, the Ministry of Electronics and Information Technology opened a public consultation on the draft Digital Personal Data Protection Rules, 2025, until 18 February 2025. The rules implement the provisions under the Digital Personal Data Protection Act of 2023, focusing on establishing frameworks for the protection of personal data. The rules specify that the transfer of personal data outside India by a data fiduciary will be subject to conditions which will be specified by Central Government order. Data fiduciaries are required to ensure that personal data remains protected when shared internationally. It includes exemptions for specific processing, such as for public interest or national security. It also mandates adequate safeguards to protect data from misuse or unauthorised access by foreign entities or governments.