6 days ago
Centre Pushes Ministries and States Toward DPDP Compliance
India is asking its government offices to better protect people’s personal information.
The request applies to ministries, departments, states and Union Territories.
Each office must make a plan explaining what it will do and when.
It must appoint officials to lead the work and coordinate with the technology ministry.
Offices must find out what personal data they collect and how they use it.
They must also check their privacy notices, complaint systems and security protections.
New digital services should include privacy protections from the beginning.
The government will review progress and help resolve common problems.
Cabinet Secretary TV Somanathan directed ministries, departments and states to prepare phased DPDP implementation plans.
Each government body must appoint a senior oversight official and a nodal officer to coordinate with MeitY.
Authorities must map personal-data processing, create data inventories and review notices, consent systems and grievance mechanisms.
Departments are expected to strengthen safeguards, examine vendor contracts and apply privacy-by-design to digital services.
MeitY will provide guidance and training, while government bodies must submit implementation-status notes for coordinated support.
- Who
- The Cabinet Secretary, ministries, departments, state governments and Union Territory administrations are involved.
- What
- Government bodies are being directed to begin phased compliance with the Digital Personal Data Protection Act, 2023.
- Where
- Across the Government of India, states and Union Territories.
- When
- The directive was issued in an August 20 letter; the law was enacted in 2023.
- Why
- To improve how government bodies collect, process, secure and protect citizens’ personal data.
Key facts
- Directive issuer
- Cabinet Secretary TV Somanathan
- Law
- Digital Personal Data Protection Act, 2023
- Required planning
- Phased implementation plans with defined responsibilities and timelines
- Officials required
- A senior implementation officer and a nodal officer for coordination with MeitY
- Data governance tasks
- Identify processing activities, prepare data inventories and review privacy notices, consent and grievance mechanisms
- Technology requirements
- Strengthen safeguards and incorporate privacy-by-design into digital government services
- Implementation support
- The Ministry of Electronics and Information Technology will provide guidance, awareness initiatives and capacity-building programmes
Quotes
TV Somanathan
Cabinet Secretary of India who issued the DPDP implementation letter
“a nodal officer is nominated for coordination with the Ministry of Electronics and Information Technology”
financialexpress.com
“A senior officer is designated to oversee implementation of the Act”
financialexpress.com
Sources
Related news
India's Data Centre Policy Push Aims to Protect Sovereign Data
Experts: Robust data governance key to patient-centric healthcare
India’s Government Data Linkage Plan Could Improve Policymaking
Doxxing and data leaks threaten India's digital dignity
Modi Sets Data, AI and Defence Priorities for India
Modi Urges Long-Term Governance, AI Use and Departmental Coordination
Teen Hacker Withholds Government Vulnerabilities Pending MeitY Response
Dixon, Amber Promoters Explore Investment in Lava Expansion
India Notifies Rs 1.27 Lakh Crore Semicon 2.0 Programme
X’s Transparency Pledge Collides With India’s Secrecy Rules
India Semiconductor Ecosystem Set to Create 50,000–60,000 Jobs
