Digital Personal Data Protection (DPDP) Act 2023: Govt Notifies Draft DPDP Rules 2025

Bhubaneswar: in pursuance to the passing of the Digital Personal Data Protection (DPDP) Act 2023, the Ministry of Electronics and Information Technology ((MEIT) has Friday notified the Draft Digital Personal Data Protection Rules 2025.

The Ministry of Electronics and Information Technology (MEIT) has notified the Draft Digital Personal Data Protection (DPDP) Rules 2025 in pursuance to the passing of the DPDP Act 2023.

As per the draft DPDP rules, social media intermediaries, like Google, Whastapp, Facebook, instagram and X, cannot open account of any minor, who is less than 18-years of age, without the consent of their parents.

Moreover, they have to delete the personal data of all users after three years.As per Rule 10 of the draft DPDP, a Data Fiduciary shall adopt appropriate technical and organisational measures to ensure that verifiable consent of the parent is obtained before the processing of any personal data of a child.

It further said, they have to observe due diligence by checking that the minor’s parents are present physically at the time of opening the account and that they are fully aware of the implications of opening the account for the minor.

The Data Fiduciary shall also maintain a record of the consent obtained from the parents for a period of not less than three years from the date of obtaining such consent and shall produce the same before the Central Government or any authority authorised by it, on demand.

The draft DPDP Rules 2025 in its third schedule, has clearly outlined who are social media intermediaries in India and has set a timeline to store personal data.