India's digital economy, valued at over $250 billion and projected to reach $1 trillion by 2030, hinges on robust data governance to sustain trust and innovation. The Digital Personal Data Protection Act, 2023, and its Rules notified on January 3, 2025, mark a foundational shift toward consent-driven data processing, minimization, and individual rights
Introduction
India's digital economy, valued at over $250 billion and projected to reach $1 trillion by 2030, hinges on robust data governance to sustain trust and innovation. The Digital Personal Data Protection Act, 2023, and its Rules notified on January 3, 2025, mark a foundational shift toward consent-driven data processing, minimization, and individual rights. However, the Ministry of Electronics and Information Technology's (MeitY) consideration to reduce compliance timelines for key provisions, from 18 months to 12 months or less for significant data fiduciaries (SDFs), signals an accelerated enforcement strategy. Discussed in a January 22, 2026, stakeholder meeting, this proposal targets obligations like appointing data protection officers and conducting impact assessments, potentially advancing deadlines to November 2026. While aimed at expediting privacy safeguards, it raises questions about operational readiness across sectors.
We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
