Archive · 27 Aug 2026
Centre Pushes Ministries and States Toward DPDP Compliance
India is asking its government offices to better protect people’s personal information.
The request applies to ministries, departments, states and Union Territories.
Each office must make a plan explaining what it will do and when.
It must appoint officials to lead the work and coordinate with the technology ministry.
Offices must find out what personal data they collect and how they use it.
They must also check their privacy notices, complaint systems and security protections.
New digital services should include privacy protections from the beginning.
The government will review progress and help resolve common problems.
Cabinet Secretary TV Somanathan directed ministries, departments and states to prepare phased DPDP implementation plans.
Each government body must appoint a senior oversight official and a nodal officer to coordinate with MeitY.
Authorities must map personal-data processing, create data inventories and review notices, consent systems and grievance mechanisms.
Departments are expected to strengthen safeguards, examine vendor contracts and apply privacy-by-design to digital services.
MeitY will provide guidance and training, while government bodies must submit implementation-status notes for coordinated support.
- Who
- The Cabinet Secretary, ministries, departments, state governments and Union Territory administrations are involved.
- What
- Government bodies are being directed to begin phased compliance with the Digital Personal Data Protection Act, 2023.
- When
- The directive was issued in an August 20 letter; the law was enacted in 2023.
- Where
- Across the Government of India, states and Union Territories.
- Why
- To improve how government bodies collect, process, secure and protect citizens’ personal data.
- Directive issuer
- Cabinet Secretary TV Somanathan
- Law
- Digital Personal Data Protection Act, 2023
- Required planning
- Phased implementation plans with defined responsibilities and timelines
- Officials required
- A senior implementation officer and a nodal officer for coordination with MeitY
- Data governance tasks
- Identify processing activities, prepare data inventories and review privacy notices, consent and grievance mechanisms
- Technology requirements
- Strengthen safeguards and incorporate privacy-by-design into digital government services
- Implementation support
- The Ministry of Electronics and Information Technology will provide guidance, awareness initiatives and capacity-building programmes