India releases the draft Digital Personal Data Protection Rules, 2025, meant to enforce the Digital Personal Data Protection Act, 2023, for public comments
Draft of rules proposed … Debanish Achom / NDTV : Parents' Consent Must For Children's Social Media Accounts: Draft Data Rules Mathrubhumi English : Draft rules for digital privacy notified; Kids under 18 need parental nod for social media accounts The New Indian Express : Centre releases draft of Data Protection Rules; mandates parental consent for children's social media accounts Telangana Today : Parental consent now mandatory for children's data use CNBC-TV18 : IT ministry releases data protection draft rules for public feedback Zee Business : Government releases draft Digital Personal Data Protection Rules without any penal clause Hindustan Times : Children below 18 will need parents' consent to create social media account: Draft rules Soumyarendra Barik / The Indian Express : In move that may impact Big Tech companies, govt now proposes localisation of personal data in draft rules Scroll.in : Parental consent mandatory for children to create social media accounts: Draft data protection rules Aditi Agrawal / Hindustan Times : Breach alert, parental nod in digital privacy rulebook Newslaundry : Modi govt releases draft personal digital data protection rules Samaya Dharmaraj / OpenGov Asia : India's Digital Data Protection Framework: Safety, Trust and Resilience Innovate India : Draft Digital Personal Data Protection Rules, 2025 Ministry of Electronics and Information Technology : Explanatory note to Digital Personal Data Protection Rules, 2025 Jatin Grover / Financial Express : Draft DPDP rules tightens grip on data handling Shouvik Das / Livemint : DPDP Rules seek to verify parental consent, enforces data localization The Economic Times : MeitY releases draft rules for DPDP Act; seeks comments from stakeholders Nikhil Pahwa / MEDIANAMA : Breaking news: India finally releases Draft Data Protection Rules for consultation Mihir Bagwe / The Cyber Express : India Releases Draft Data Protection Rules for Public Consultation Akshit Pushkarna / Inc42 Media : Centre Releases Draft Rules For Digital Personal Data Protection Act X: Anjali Bhardwaj / @anjalib_ : Govt has put out draft rules to operationalize the Data Protection Act 2023. The Act amends the RTI law & vests excessive powers in central govt including appointing the oversight body which can impose penalties of 500 crore. Re-upping our article on the perils of the DPDP Act. [image] Nikhil Pahwa / @nixxin : India released its draft Data Protection Rules yesterday, and my initial thoughts are that it appears to be disconnected from reality. I'm still reading and will add more, but first the positive change, then the rest. Btw, expect a complete overview of the Rules on @medianama @internetfreedom : .@GoI_MeitY has released the long awaited DPDP Rules 16 & a half months after the DPDP Act, 2024 was enacted. We are dismayed that after such a long wait the Rules have failed to rise to the occasion & meet our expectations. 🧵1/9 https://internetfreedom.in/... @pib_india : The draft Rules details about the various implementation aspects such as the notice by the Data Fiduciary to the individuals, registration and obligations of Consent Manager, processing of personal data for issuance of subsidy, benefit, service etc. by State, applicability of @pib_india : .@GoI_MeitY releases Draft Digital Personal Data Protection Rules, 2025 for public consultation; Feedback/comments sought from public by 18th February, 2025 Read here: https://pib.gov.in/... @cnnnews18 : #BreakingNews |Government Of India releases Draft Of Digital Personal Data Protection Rules @AmanKayamHai_ shares more details @JamwalNews18 | #socialmedia #personaldataprotectionrules #children #privacy [video] Srinivas Kodali / @digitaldutta : Looks like 2025 is the year of data protection. MeITY released draft data protection rules. Aditi Agrawal / @aditi_muses : New: Key points from the draft Digital Personal Data Protection Rules. Some expected things, some new things, some scary things (data localisation, Section 36+Rule22). https://www.hindustantimes.com/ ... @barandbench : The Ministry of Electronics and Information Technology has published the draft rules for the Digital Personal Data Protection (DPDP) Act for public consultation. Suggestions and objections regarding the draft rules can be submitted through the MyGov portal until February 18, [image] @mirrornow : 16 months after #DataProtectionAct, draft of digital personal data issued - ‘Child below 18 needs consent’ to create social media account - Draft: Consent needed from parents - Draft released for public consultation @anchoranjalip [video] Ashwini Vaishnaw / @ashwinivaishnaw : These draft rules will be finalised only after extensive consultation. Please do share your views. https://innovateindia.mygov.in/ ... Ashwini Vaishnaw / @ashwinivaishnaw : Draft DPDP rules are open for consultation. Seeking your views. https://innovateindia.mygov.in/ ... LinkedIn: Rajnish Kumar : Ministry of Electronics and Information Technology (MeitY) through its notification dated January 3, 2025 has issued draft of rules proposed to be made for implementation of Digital …
Context & Ripple Effects
India’s DPDP Act needs implementing rules before its consent and data-governance framework can operate in practice. This consultation turns that framework into proposed operational requirements, including consent-management registration and provisions for state processing of data for services and benefits.
The child-consent proposal extends an approach already seen in India’s draft online-gaming rules, while the accompanying age-and-parent identity checks described in related DPDP coverage make the requirement materially more demanding for platforms than a simple consent notice.
First-order effects
- Platforms serving users under 18 would need proposed workflows to obtain parental consent, including verification of a parent’s age and identity, before processing children’s personal data or enabling social-media accounts.
- Consent Managers and data-handling organizations gain a more defined proposed compliance framework, while large technology companies must assess the draft’s potential personal-data localization requirements.
Second-order effects
- Age assurance and verifiable parental consent could push platforms toward new identity, consent-recordkeeping, and account-access controls; those controls may add friction for families and younger users.
- Public comments will test whether the proposed obligations can be implemented consistently across social platforms, consent intermediaries, and government service delivery without making consent inaccessible or unreliable.
Third-order effects
- If adopted substantially as drafted, the rules would shift India’s privacy regime from statutory principles toward enforceable operational controls centered on auditable consent and child-data protections.
- The proposal is part of a longer policy progression from earlier proposals for a data-protection authority and data localization toward a more prescriptive domestic data-governance framework; final obligations remain contingent on the consultation and notified rules.
The trend: India is translating broad digital-data rights into platform-level verification, consent, and data-governance requirements, with minors’ access emerging as a key enforcement boundary.