On 20 October 2025, the Ministry of Communication, Digital Technology, and Innovations opened a consultation on the Data Protection Act, 2025, including business registration requirements, until 31 October 2025. The Act would require data controllers to register in a Data Protection Register maintained by the Data Protection Authority. Unregistered data controllers would not be permitted to process personal data. Registration would be valid for twelve months.
Original source