MeitY notifies final Digital Personal Data Protection Rules 2025

The article analyses the Ministry of Electronics and IT’s notification of the final Digital Personal Data Protection Rules 2025, marking a major shift in India’s data governance framework. It details obligations on data fiduciaries, user consent norms, data processing standards, and enforcement mechanisms. The new rules establish stronger accountability, reporting responsibilities, and penalties for non-compliance. It also explains classification of significant data fiduciaries and requirements relating to data audits, grievance redressal, breach reporting, and cross-border transfers. The article outlines how these rules align with global data-protection principles while incorporating India-specific considerations. It concludes with an assessment of the compliance burden on companies and the potential need for internal restructuring.