IT Ministry preparations have ended and the Digital Data Security Law rules may be out this year

The draft rules for the Digital Personal Data Protection Act (DPDP) have been finalized by the Central Government's Ministry of Electronics and Information Technology. By the end of this month, the government can release these regulations. However, in January 2025, the DPDP rules may be announced. Because after the publication of these rules, the consultation process will start on it.

These laws had been passed by the central government in August 2023 from Parliament. But till today these could not be implemented. The reason is that these governments have taken more than a year to prepare the rules. But now these rules are completely ready. Data security rules can be issued soon after the results of Jharkhand and Maharashtra assembly elections.

The new Central Government rules on data security will clearly explain this. There will not be any other aspect of the law apart from that. On these rules, the government has not set any official deadline. The law would make data security compulsive in nature to make people Vanderbilt toward it, and this will help prevent personal data breach cases.

When these provisions come into effect, the DPDP law would replace Section 43A of the Information Technology Act, 2000, along with the Information Technology Rules, 2011. According to this law, personal data should be used only for a legitimate purpose. Even for this, consent has to be obtained from the person concerned. Along with this, the government has also fixed the limit for data collection. That is, personal data shall be collected only when required. Without creating sub-categories like sensitive personal information and important personal data, this law shall apply to all types of personal data.