NEW DELHI: Millions of citizens going online will have guaranteed control over their digital data while social media companies such as Facebook and Instagram will need verifiable parental consent before onboarding children, or those under 18 years, with the govt finally notifying rules to operationalise the digital personal data protection (DPDP) law that was originally passed by Parliament in Aug 2023. The much-awaited rules promise a consent-based regime to safeguard the data of users who go online for social media, e-commerce, gaming, banking, payments and for availing of govt services. Companies and organisations violating the rules will face penalties, up to ₹250cr for serious failures to protect data, and breaches.The rules also require companies to quickly inform users and the new data protection board about any data breach. However, these rules will be implemented gradually. The govt has given companies an 18-month window for transition, considering the big back-end changes they will need to undertake. Any breach must be promptly informed in “plain language, explaining the nature and possible consequences of the breach, the steps taken to address it, and contact details for assistance”, the govt said. New rules bar transfer of some data abroad It also said the law is guided by “seven core principles” – consent and transparency, purpose limitation, data minimisation, accuracy, storage limitation, security safeguards, and accountability.Regarding online data of children, where Big Tech and other major companies had been lobbying for a “liberal” approach, the new law mandates that companies must obtain verifiable consent before processing their personal data, with limited exemptions for essential purposes such as healthcare, education and real-time safety. “For persons with disabilities who cannot make legal decisions even with support, consent must come from a lawful guardian.”To obtain verifiable parental consent for processing a child’s personal data, companies must adopt appropriate technical and organisational measures “.End of ArticleFollow Us On Social MediaVideos‘Bihar’s New MY Formula Is Mahila & Youth’: PM Modi Targets RJD-Congress After NDA’s Landslide Win‘Too Big To Fail’: South African Envoy On Trump’s G20 Boycott, Says PM Modi’s Presence Crucial‘Misa-Priyanka Ko Dickey Mein…’: Yashwant Deshmukh’s Message to RJD–Cong After NDA’s Bihar WinAir India Bombing Returns To Spotlight, CSIS Warns Canada Of New Extremist Networks And Rising RisksSix Ways Nitish Kumar Proved ‘Tiger Abhi Zinda Hai’ As NDA Registers Big Win in Bihar Assembly Polls‘Full Stop to Many Questions’ Chirag Paswan Hails PM Modi, Nitish as NDA Soars Past 200 SeatsKerala Teenager Dies in Dubai After Rooftop Fall While Trying To Take Photos of Low-Flying PlanesPakistan’s Costly Lobbying Blitz Won Access To Trump As India Faced The Harshest Tariffs, Claims NYTChilling Terror Attack Masterplan: How Medical Professionals Built A 5-Step Nationwide Bombing PlotBihar Assembly Poll Results: NDA Touches 200-Seat Lead, Congress Intensifies SIR, Vote Chori Attacks123PhotostoriesShah Rukh Khan closes the year powerful and proudEgg white versus egg yolk: Which one is healthier for breakfast7 dhaba-style dal preparations to try at home5 unique attractions in America that will make you say “I can’t believe this is real”!From BF Karan Kundrra wanting to marry her right after Bigg Boss to her near-fatal injury on Khatron Ke Khiladi: Tejasswi Prakash talks about life, career and loveSlow down aging naturally: 6 scientifically proven foods that workTop 5 platinum producing countries that generate over 90% of the world’s total platinum5 foods to combine with leftover rice for better nutritionMeet the eagles with the biggest wingspans on EarthLearning with purpose: 5 quotes by Dr BR Ambedkar that students can carry for life123Hot PicksAlinagar Election ResultRaghopur Election ResultBihar Election Result 2025Gold rate todaySilver rate todayPublic Holidays NovemberBank Holidays NovemberTop TrendingLaMelo BallGiannis AntetokounmpoJoel EmbiidAidan HutchinsonNHL Trade RumorLatin GrammyDak PrescottBrazilian Bodybuilder Found DeadPercy HarvinStephen Curry
NEW DELHI: Millions of citizens going online will have guaranteed control over their digital data while social media companies such as Facebook and Instagram will need verifiable parental consent before onboarding children, or those under 18 years, with the govt finally notifying rules to operationalise the digital personal data protection (DPDP) law that was originally passed by Parliament in Aug 2023. The much-awaited rules promise a consent-based regime to safeguard the data of users who go online for social media, e-commerce, gaming, banking, payments and for availing of govt services. Companies and organisations violating the rules will face penalties, up to ₹250cr for serious failures to protect data, and breaches.

The rules also require companies to quickly inform users and the new data protection board about any data breach. However, these rules will be implemented gradually. The govt has given companies an 18-month window for transition, considering the big back-end changes they will need to undertake. Any breach must be promptly informed in “plain language, explaining the nature and possible consequences of the breach, the steps taken to address it, and contact details for assistance”, the govt said. New rules bar transfer of some data abroad It also said the law is guided by “seven core principles” – consent and transparency, purpose limitation, data minimisation, accuracy, storage limitation, security safeguards, and accountability.Regarding online data of children, where Big Tech and other major companies had been lobbying for a “liberal” approach, the new law mandates that companies must obtain verifiable consent before processing their personal data, with limited exemptions for essential purposes such as healthcare, education and real-time safety. “For persons with disabilities who cannot make legal decisions even with support, consent must come from a lawful guardian.“To obtain verifiable parental consent for processing a child’s personal data, companies must adopt appropriate technical and organisational measures “.