India: Ministry of Electronics and Information Technology opened consultation on Digital Personal Data Protection Rules 2025 including cybersecurity regulation

On 3 January 2025, the Ministry of Electronics and Information Technology opened a public consultation on the draft Digital Personal Data Protection Rules, 2025, until 5 March 2025. The rules impose obligations on Data Fiduciaries and Data Processors across sectors handling personal data. The rules mandate reasonable security safeguards, including encryption, access controls, logging, and data backups, along with contractual requirements for processors to ensure equivalent protections. In the event of a personal data breach, Data Fiduciaries must notify affected individuals promptly and report to the Data Protection Board with detailed information within 72 hours.