On 3 January 2025, the Ministry of Electronics and Information Technology (MeitY) released the Draft Digital Personal Data Protection Rules, 2025, developed under the framework of the Digital Personal Data Protection Act, 2023. The Draft Rules aim to establish an ecosystem that balances individual rights, organisational obligations, and national interests. Formulated after 16 months of expert consultations, the Rules aim to address existing knowledge gaps and provide practical compliance strategies. They represent a significant paradigm shift, emphasising stringent data protection and privacy measures that will redefine business operations. Given their sector-agnostic nature, organisations must reinvent and invest strategically to thrive in this new era.

A step closer to new privacy laws in India

A step closer to new privacy laws in India

Stay ahead of regulatory changes. Learn how the DPDP Draft Rules impact your organisation/industry.

Know more

Key highlights of the DPDPA

What our leaders have to say

Vishesh C. Chandiok"DPDPA is the big shift towards enabling India’s digital economy and its innovation ecosystem - laying the groundwork for a data-driven business environment that thrives on creating investor value, improving organisational culture and enhancing customer trust."
Vishesh C Chandiok, Chief Executive Officer, Grant Thornton Bharat

Deepankar Sanwalka"India’s privacy era ushers in fresh opportunities for businesses in the realm of technology enablement and transformation. Responsible adoption will be key towards striking a fine balance between innovation and privacy."
Deepankar Sanwalka, Senior Partner, Grant Thornton Bharat

Impact of DPDPA

The DPDP Act establishes a uniform and standardised approach to data protection. However, it will have a widespread impact on various sectors -

  1. Customer profiling, authentication, sensitive data
  2. Process outsourcing - fintech partnerships, data processing, product alliances
  3. Risk management - credit, AML, fraud, insurance
  4. Financial information and transaction data

Download report    To know more about the industry, click here

  1. Personal preferences and behaviour
  2. Device information and location
  3. Digital communication data and transaction data
  4. Sensitive data from online activities

To know more about the industry, click here

  1. Name, address and contact numbers
  2. Consumer preferences
  3. Payment and transaction data

Download flyer    To know more about the industry, click here

  1. Patient health records
  2. Health insurance
  3. Clinical trial data
  4. Biometric and genetic data

To know more about the industry, click here

  1. Travel itinerary
  2. Payment information
  3. Reservation information
  4. Guest feedback

Transforming challenges into business opportunities

The video is playing. This video is playing in mini-player mode.

The video is playing. This video is playing in mini-player mode.

How Grant Thornton Bharat can help?

  • Develop customised approaches for different industries
  • Establish and manage Data Protection Offices
  • Implement automated tools for compliance
  • Provide guidance in data gathering to meet DPDPA’s requirements
  • Assist in streamlining data assimilation and management
  • Offer independent data audit services
  • Assist with integrating compliance into governance practices
  • Ensure airtight compliance to uphold the reputation of independent directors
  • Support Chief Information Officers and Chief Security Officers
  • Collaborate with technical experts to align IT systems with DPDPA’s requirements
  • Provide expert dispute resolution for data breaches

Digital Personal Data Protection Act (DPDPA), 2023

Digital Personal Data Protection Act (DPDPA), 2023The Act is set to have a widespread impact across various sectors, given that nearly every sector, in one way or the other, handles personal and sensitive data

Download our brochure

Report

How will the DPDP Act impact Financial Services?

The DPDP Act of 2023 aims to protect personal data, empower individuals, and enforce strict data handling standards.

Publication

Auto Byte - November 2023

Assessing Digital Personal Data Protection Act’s (DPDPA) influence on the automotive industry

Flyer

Building consumer trust through robust data protection

DPDPA marks a significant paradigm shift, emphasising stringent data protection and privacy measures that will redefine how businesses will operate.

    Frequently asked questions (FAQs)