On 31 October 2025, the Ministry of Communication, Digital Technology, and Innovations closes its consultation on the Data Protection Act, 2025, including data protection authority governance. The Act would establish the Data Protection Authority as the responsible agency for protecting personal privacy, ensuring efficient management of personal data, establishing standards for local processing and cross-border transfers, and regulating the personal data digital economy. To this end, the Authority would be empowered to issue guidelines and directives, conduct investigations into alleged breaches of data protection regulations, accredit data protection service providers, mediate disputes, and issue penalties and corrective measures. The Authority would have the power to issue enforcement notices, respond to assessment requests and individual complaints, and carry out compliance audits.
Original source