On 31 October 2025, the Ministry of Communication, Digital Technology and Innovations closes its consultation on the Data Protection Act, 2025, including operational license requirements. The Act would require data protection service providers to obtain a license from the Data Protection Authority prior to operation. Data protection services cover activities designed to provide technical tools for personal data management, and explicitly exclude legal, compliance, and policy consultancy services. A data protection service license would be valid for twelve months.
Original source