The Ministry of Electronics and Information Technology has issued the draft rules for the Digital Personal Data Protection Act (DPDPA) first published in 2023. 

The ministry has also called for feedback and comments on the draft rules on the MyGov portal with a deadline of 18 February 2025.

According to the act, which is to be implemented in 2025, children below the age of 18 will need parental consent to open social media accounts. The act added that educational institutions and child welfare organisations could be exempt from some provisions of the rules.

DPDPA also proposes enhanced consumer rights, allowing users to demand the deletion of their data and seek transparency from companies about why their data is being collected. Consumers will also have the right to challenge data collection practices and demand clear explanations for data usage.

Penalties could be as high as INR 250 crore for breaches. 

The government will be creating a search-cum-selection committee to recommend candidates for the position of chairperson of the data protection board. The committee will be led by the cabinet secretary, secretary MeitY, secretary DLA and include two subject matter experts. 

The chairperson is entitled to a consolidated salary of INR 4,50,000 per month, while each member will receive INR 4,00,000 per month.