According to S Krishnan, secretary at the Ministry of Electronics and Information Technology (MeitY), the rules for the Digital Personal Data Protection (DPDP) Act are expected to be finalised within the next six to eight weeks. He stated that these regulations are intended to play a significant role in reducing personal data leaks.
MeitY is currently reviewing the feedback received during the public consultation phase, which ran from January 3, 2025 to March 5, 2025. Krishnan noted that a further round of internal consultations may follow this analysis to refine the draft rules.
He also highlighted the growing trend of cyber security breach reporting, describing it as a positive development. According to Krishnan, such reporting enables the government to better assess the scale and origin of cyber threats.
