Digital Personal Data Protection (DPDP) Rules within the next fortnight and may notify the final version of the bill by the end of January 2024, sources said.
A meeting of senior executives from social media and internet intermediaries was held with senior officials from the ministry of electronics and information technology on Wednesday during which important points such as child gating, the consent architecture to be framed as well as the rights and obligations of data principals were
discussed, a source said.
The Digital Personal Data Protection Act, ratified in August this year, mandates that any company or individual collecting, managing or working with data from other users must obtain explicit consent from them by
telling them about the purpose for which the said data has been obtained.
The DPDP Act also mandates that such companies which collect, manage or process data, must not go beyond the mandate for which the consent was obtained.
The Act had received The President’s assent in August this year, making a privacy law a reality after five years in the making. The government is yet to release the executive rules which will define the rules and regulations of how the law will be implemented.