The DPDP Act was passed in 2023, and the rules will define various provisions of the legislation
The Centre has asked organisations, including industry and public bodies, to not wait for the rules of the Digital Personal Data Protection Act to be notified to adapt their systems and build capacities in keeping with the new law, sources have told Moneycontrol.
The message was conveyed during a meeting with stakeholders on October 14. Senior officials of Ministry of Electronics and Information Technology (MeitY), National Informatics Centre, members of the industry, civil society and lawyers were among those who attended the meeting.
The government did not commit to a timeline on the release of the rules of the DPDP Act for consultation, sources said. “The myth was busted that please don’t wait (for the rules to be released). Officials said that the rules are not going to add any incremental value or clarity,” one the participants in the meeting told Moneycontrol.
Another source said, “Officials said that rules will not override the Act. There will be nothing miraculous in it, and hence it was prudent for organisations to start building their capacities in accordance with the Act.”
The DPDP Bill was passed by Parliament nearly a year ago but India’s first data privacy law, which brings safeguards to prevent personal data breaches, has still not yet been implemented as many provisions require additional rules.