Data rules may debut in graded manner

livemint.com:

NEW DELHI : The central government is planning a “graded" transition regarding compliance with rules under the Digital Personal Data Protection (DPDP) Act, an official of the plans said. Under this approach, micro, small and medium enterprises (MSMEs) will get longer time frames to comply, while larger corporations will get less. “We may do this at graded levels, where the vast majority of Big Tech, as well as companies, can transition quicker.

MSMEs, government bodies and smaller companies can take a little bit more time," the official at the Ministry of Electronics and Information Technology (Meity) said on condition of anonymity. The transition timeline will also indicate the final date from which rules under the DPDP Act will be notified. However, the official added that the government has not decided on the time frames yet.

Meity has received varying feedback on the matter, with large companies seeking more time to transition than smaller ones. However, the Centre feels MSMEs and smaller firms need more time for compliance, as larger companies have more resources and are hence better equipped for the change. Answering a question on when the final rules under the DPDP Act will be notified, the official said, “The broad rules are ready, and the draft is getting prepared." Under the rules of the DPDP Act, the appellate body in the grievance redressal mechanism, called Data Protection Board, will begin with setting up a digital platform through which complainants can interact with the body.