India: Ministry of Electronics and Information Technology issued Digital Personal Data Protection Rules including cross-border data transfer regulation

On 13 November 2025, the Ministry of Electronics and Information Technology issued the Digital Personal Data Protection Rules implementing the Digital Personal Data Protection Act of 2023. The rules specify that the transfer of personal data outside India by a data fiduciary will be subject to conditions that will be specified by the Central Government order. Data fiduciaries are required to ensure that personal data remains protected when shared internationally. It includes exemptions for specific processing, such as for public interest or national security. It also mandates adequate safeguards to protect data from misuse or unauthorised access by foreign entities or governments.