The government on Friday released the draft rules under the Digital Personal Data Protection Act seeking comments from stakeholders by February 18. The rules have proposed that all data fiduciaries shall adopt appropriate technical and organisational measures to ensure that verifiable consent of the parent is obtained before the processing of any personal data of a child and shall observe due diligence.
The draft of the rules also proposes that significant data fiduciaries, as defined under the DPDP Act, undertake an annual Data Protection Impact Assessment and present the findings to the Data Protection Board.
The DPDP Act was passed by the Lok Sabha in August 2023, marking a key step toward regulating how private and government entities handle citizens’ data. Despite its passage, the legislation faced opposition criticism for allegedly violating the Right to Privacy, with calls for further deliberation in a parliamentary panel.
Discover the stories of your interest