India: Ministry of Electronics and Information Technology issued Digital Personal Data Protection Rules including cross-border data transfer regulation

On 13 November 2025, the Ministry of Electronics and Information Technology issued the Digital Personal Data Protection Rules implementing the Digital Personal Data Protection Act of 2023. Rule 23 stipulates that the Government may request that a Data Fiduciary or Intermediary provide specific information via an authorised individual listed in the Seventh Schedule. Should the disclosure of such information potentially compromise India's sovereignty, integrity, or security, the Data Fiduciary or Intermediary is obligated to obtain prior written approval before disseminating the information.