Data Privacy in Digital India Draft DPDP Rules Analysis

This document is a technical report that analyzes the draft Data Protection and Digital Privacy (DPDP) rules released in 2025, which aim to enhance data privacy governance in India. The report outlines the key components of the DPDP Act, emphasizing its focus on digital personal data and the rights of individuals. It discusses the introduction of Consent Managers, a new concept designed to facilitate consent management for data principals, and details the responsibilities of these managers. The report also covers notice requirements for data fiduciaries, emphasizing the need for clear communication with data principals regarding data collection and processing. Additionally, it addresses the importance of verifiable consent, particularly for vulnerable groups, and highlights the challenges organizations face in implementing these rules, such as inconsistent compliance and cross-border data transfer concerns. The document concludes by noting the need for further clarity on certain aspects of the rules to ensure effective compliance and operationalization by businesses.