Subscribe to enjoy similar stories. More than a year after the Digital Personal Data Protection (DPDP) Act was passed, the government has released the draft rules that will enable this law’s implementation.
Public feedback has been sought until 18 February, after which the final rules will be notified. Given India’s rising cases of data theft and privacy invasion, it’s a relief that a regulatory framework is imminent.
While the rules are expansive, their requirement of parental consent for under-18-year-olds to join social media and gaming platforms could deliver a pragmatic age-gating regime. If the identity-linked age verification process is well tokenized for anonymity, it will balance privacy concerns with the need to safeguard children online.
That said, the return of data localization requirements will place an avoidable burden on private enterprise, as also the overly stringent rules on data security and breaches. The draft rules do little to reassure critics who contend that government agencies will get a peek into personal data with rather few restraints.
Read more on livemint.com