MeitY 发布 DPDP 规则草案，邀请公众反馈

印度政府本月公布了《数字个人数据保护法》下的数据保护规则草案。 “数字个人数据”草案

The Government of India published the draft data protection rules under the Digital Personal Data Protection Act this month.

印度政府本月公布了《数字个人数据保护法》下的数据保护规则草案。

The draft 'Digital Personal Data Protection Rules, 2025' (DPDP) included specific provisions related to handling digital data, much like Europe's GDPR, and outlined how information from minors had to be protected.

“2025 年数字个人数据保护规则”(DPDP) 草案包括与处理数字数据相关的具体规定，与欧洲的 GDPR 非常相似，并概述了如何保护未成年人的信息。

The DPDP outlines an illustration of how a "data fiduciary" (DF) needs to handle the information of the "data principal" (DP). Here, the data fiduciary is the entity that handles the information and manages the online platform (such as Meta, X, and so on). The data principal is the person or entity whose data is being handled. In the case of data protection in minors, the DP is a child.

DPDP 概述了“数据受托人”(DF) 需要如何处理“数据主体”(DP) 的信息。这里，数据受托人是处理信息和管理在线平台的实体（例如Meta、X等）。数据主体是正在处理其数据的个人或实体。就未成年人数据保护而言，DP 是儿童。

Case 1: Child wants to make an account in a DF platform, where the parent already has an account

案例1：孩子想在DF平台上注册账户，而家长已经有该平台的账户

Once the child informs the DF that they are a minor, the DF needs to enable the minor's parent to identify themselves through the DF website, app or "other appropriate means". Once the DF confirms the parent's reliable identity through their platform, the DF can go ahead and process the minor's personal data to create their user account.

一旦孩子告知 DF 自己是未成年人，DF 需要让未成年人的家长能够通过 DF 网站、应用程序或“其他适当方式”证明自己的身份。一旦 DF 通过其平台确认了家长的可靠身份，DF 就可以继续处理未成年人的个人数据以创建其用户帐户。

Case 2: Child wants to make an account in a DF platform, where the parent does not have an account

案例2：孩子想在DF平台上注册账户，而家长没有账户

The initial steps are similar to the first case, but here, the DF needs to verify the parent's identity using a reference of details issued by an "entity entrusted by law or the Government with the maintenance of the said details or to a virtual token mapped to the same". The parent may "voluntarily make such details available using the services of a Digital Locker service provider".

最初的步骤与第一种情况类似，但在这里，DF 需要使用“受法律或政府委托维护上述详细信息的实体或映射的虚拟代币”发布的详细信息参考来验证父母的身份。至同”。家长可以“使用数字储物柜服务提供商的服务自愿提供此类详细信息”。

ALSO READ

另请阅读

In the case of guardians in charge of minors, the data fiduciary needs to obtain verifiable consent from the person identifying [themselves] as the lawful guardian of a person with disability and "shall observe due diligence to verify that such guardian is appointed by a court of law, a designated authority or a local level committee, under the law applicable to guardianship."

对于负责未成年人的监护人，数据受托人需要获得自称为残疾人合法监护人的人的可核实的同意，并且“应进行尽职调查，以核实该监护人是由法院指定的”根据适用于监护权的法律，指定机构或地方委员会。”

While these apply to children's accounts, an extra layer of protection is guaranteed to all data principals by the DPDP, where the person whose data is processed by online platforms, and so on, can at any time access all information about their data and even erase such information.

虽然这些适用于儿童账户，但 DPDP 为所有数据主体提供了额外一层保护，其中数据由在线平台等处理的人可以随时访问有关其数据的所有信息，甚至删除数据此类信息。

For this and any escalations regarding the same, the platforms (DF) need to publish and maintain a proper grievance redressal system and ensure its effectiveness, including adhering to the period of time decided for the cases.

对于此问题以及任何与此相关的升级，平台（DF）需要发布和维护适当的申诉补救系统并确保其有效性，包括遵守为案件决定的期限。

MeitY publishes draft DPDP rules, invites public feedback

MeitY 发布 DPDP 规则草案，邀请公众反馈

The government published the draft data protection rules in the Gazette, inviting feedback from stakeholders and the public through the Ministry of Electronics and Information Technology (MeitY).

政府在公报上公布了数据保护规则草案，并通过电子和信息技术部（MeitY）征求利益相关者和公众的反馈意见。

The Centre hopes to finalize the 'Digital Personal Data Protection Rules, 2025' (DPDP) soon after incorporating such feedback. "The submissions will be held in fiduciary capacity in MeitY and shall not be disclosed to anyone at any stage, enabling persons to submit feedback/comments freely without any hesitation. A consolidated summary of the feedback/comment received, without attribution to stakeholder, shall be published after the finalization of the rules," said the ministry about the stakeholder publications.

该中心希望在纳入此类反馈后尽快敲定《2025 年数字个人数据保护规则》(DPDP)。 “提交的内容将以受托人身份保存在 MeitY 中，并且在任何阶段都不得向任何人披露，使人们能够毫不犹豫地自由提交反馈/评论。收到的反馈/评论的综合摘要（不归属于利益相关者）应将在规则最终确定后发布”，该部在谈到利益相关者出版物时表示。

For public feedback, the ministry added, "The submissions will not be disclosed and held in fiduciary capacity, to enable persons submitting feedback to provide the same freely. No public disclosure of the submissions will be made."

对于公众反馈，该部补充说，“这些意见书不会被披露，也不会以信托身份持有，以便提交反馈的人能够自由地提供同样的意见。不会公开披露这些意见书。”

The last date for submitting feedback on the draft DPDP rules is February 18, 2025. The feedback can be submitted through the MyGov portal at https://innovateindia.mygov.in/dpdp-rules-2025/

提交有关 DPDP 规则草案反馈的最后日期是 2025 年 2 月 18 日。反馈可以通过 MyGov 门户网站提交：https://innovateindia.mygov.in/dpdp-rules-2025/

The new DPDP rules, a massive change in how India views and uses the internet, are expected to roll out soon this year.

新的 DPDP 规则预计将在今年很快推出，这是印度看待和使用互联网方式的巨大改变。