Newsletter
India’s long-awaited data privacy law has finally come into force. Two years after Parliament approved the Digital Personal Data Protection Act, the government has issued the official rules and set up a four-member board to implement it.
Here’s the breakdown: companies have up to 18 months to follow the new requirements. Consent managers, which help users control what data they share, get 12 months to register.
Social media platforms, online services, and any business handling user data must clearly explain what information they collect and why. They must also give users an easy way to withdraw consent or file complaints with the Data Protection Board.
Within 18 months, every platform dealing with personal data must appoint a data protection officer.
For users under 18, companies must obtain verified parental consent, and some types of data used for tracking children will be fully banned.
For national security reasons, the government can request personal data from any company and may stop them from informing users.
What this means for you: apps and websites will need to be more transparent. You will see clearer permission prompts, more control over your data, and easier ways to get it deleted. Companies cannot quietly collect or use your information anymore.
