Summary: India has drafted new rules to implement its Digital Personal Data Protection (DPDP) Act, which aims to enhance data privacy for its citizens. The rules outline obligations for companies regarding data handling and introduce penalties for non-compliance, while also raising concerns about government exemptions.
Threat Actor: Government of India | Government of India
Victim: Indian citizens | Indian citizens
Key Point :
- The DPDP Act grants citizens rights over their data, including access, correction, and erasure.
- New rules require companies to notify customers about data collection and breaches, with penalties for non-compliance.
- Concerns arise over government exemptions from these rules, questioning fairness and accountability.
- The feedback deadline for the draft rules is February 18, with a transition period for compliance anticipated.
Source: https://www.darkreading.com/cybersecurity-operations/india-overhauled-national-data-privacy-rules