What are the DPDP Rules 2025? The government's biggest law on your digital privacy, find out what's about to change.

DPDP Rules 2025: The Government of India officially released the Digital Personal Data Protection Rules 2025 (DPDP Rules 2025) on November 14th. These rules aim to give citizens complete control over their digital data and protect them from growing privacy threats in the online world. The government has created these rules under the Digital Personal Data Protection Act 2023 and will implement them in a phased manner over the next 12–18 months.

What does the DPDP Rules 2025 include?

The main focus of the new rules is the safe use of data, clear notice, and complete control over consent. Several important provisions have been added to these rules.

Registration of Consent Managers: Every organization will be required to appoint such managers to monitor user consent.

Notice Before Data Processing: Companies will clearly explain to users what data they are collecting, why, and how it will be used.

Strong Data Security Standards: Measures such as encryption, firewalls, and security protocols will be mandatory.

Immediate Data Breach Notification: In the event of any data breach, the relevant user must be immediately and clearly informed.

Data Storage Timeframe: No data will be stored for more than one year unless legally required.

Data Deletion Notice: Users must be notified 48 hours before data deletion.

Special Rules for Minors and Persons with Disabilities: Processing the data of children under 18 years of age and persons with disabilities will require verified consent from their guardian. These rules will significantly curb problems such as spam calls, number leaks, unauthorized access, and data theft.

What do experts say?

Legal and cybersecurity experts believe these rules will bring India closer to global data protection standards. According to experts, companies will be required to make significant changes to their processes regarding privacy notices, user consent, data transfer, and security over the next 18 months. Companies have been placed on greater responsibility for protecting children's data. Certain services, such as health, education, and child safety, have been exempted to ensure essential services are not disrupted.

What is the penalty system?

In case of violations, a Data Protection Board will be established to determine penalties. A fine of up to ₹250 per case of data breach can be imposed. To provide relief to small businesses, this penalty will be graded, i.e., determined according to the situation.

In 2017, the Supreme Court declared the right to privacy a fundamental right. Subsequently, the Data Protection Act came into effect in 2023, giving citizens the right to correct, delete, and control their data. The new rules further strengthen this framework and provide exceptions to certain provisions in situations such as government, court, legal investigation, foreign contracts, financial default etc.ers; learn the full details.

D2D Service: D2D, or Device-to-Device service, is a next-generation technology that allows two mobile phones to connect and communicate directly without the need for network towers, mobile data, internet, or Wi-Fi.

D2D Service: D2D, or Device-to-Device service, is a next-generation technology that allows two mobile phones to connect and communicate directly without the need for network towers, mobile data, internet, or Wi-Fi. This means that even if there is no network in your area, the internet is down, or the towers are down, your phone will still be able to connect directly with another phone. The technology the government is working on could completely change the game of mobile connectivity in India.

How will D2D technology work?

Typically, when we make a call or send a message, the signal first travels to the mobile tower and then from there to the other phone. However, D2D service bypasses this entire system. Using radio waves and short-range communication technology built into the phone, two devices connect directly to each other. This will reduce network load and make basic communication possible even where there is no network.

Why is the government launching this service?

There are thousands of areas in India where mobile networks are extremely weak. Towers fail in hilly areas, forests, rural areas, tunnels, tall buildings, or during natural disasters. This prevents people from seeking help even in emergencies.

The government's goal is to provide network-free communication through the D2D service, allowing people to contact each other even in emergencies. This technology could prove extremely useful for national security, disaster management, and the general public.

What benefits will mobile users receive?

• The introduction of D2D service could completely transform the mobile user experience.
• Calls and messaging are possible even in no-network zones.
• Immediate connectivity in case of a disaster or network failure.
• Reduced load on the tower, improving the overall network.
• Easy communication in rural and mountainous areas.
• This feature could make file sharing, location sharing, and local communication much faster and more secure in the future.

When could this feature be launched?

According to sources, the government is planning this on a large scale, and a pilot project could begin soon. Once the test is successful, it will be gradually implemented across all smartphones and operators. This could prove to be a major step in India's digital revolution in the coming years.

The introduction of D2D service could completely transform the world of mobile networks. This feature, which could prove to be a lifeline even in difficult situations, is now moving towards becoming a reality.