India: Ministry of Electronics and Information Technology issued Digital Personal Data Protection Rules including data localisation requirement

On 13 November 2025, the Ministry of Electronics and Information Technology issued the Digital Personal Data Protection Rules implementing the Digital Personal Data Protection Act of 2023. The rules require Significant Data Fiduciaries to ensure that certain categories of personal data, identified by the central government on the basis of expert recommendations, are processed in a way that prevents both the data and related traffic data from being transferred outside India.