Archive · 22 Jan 2026
India May Shorten Data Law Compliance for Big Tech
The Indian government is thinking about making big tech companies like Meta, Google, and Amazon follow the new data protection law faster.
Right now, they have 18 months to follow the rules, but the government wants to reduce this to 12 months.
These companies are called 'significant data fiduciaries' because they handle a lot of personal data.
The government also wants to set up a committee to decide what kind of data should be stored in India.
Big companies already follow strict privacy laws in Europe, so the government thinks they can follow India's law faster too.
There are also rules about protecting children's data and telling people if there's a data breach.
The law has some exemptions for the government for reasons like national security.
The Indian government may shorten the compliance timeline for Big Tech companies to 12 months from the current 18 months.
Big Tech companies like Meta, Google, Apple, Microsoft, and Amazon are expected to be classified as 'significant data fiduciaries'.
The government plans to set up a committee to prescribe types of personal data that must be localized within India.
Tech companies must implement a mechanism for collecting verifiable parental consent before processing children's personal data.
The penalty for failing to have adequate safeguards for preventing a data breach could go up to Rs 250 crore.
- Who
- Indian government, Big Tech companies (Meta, Google, Apple, Microsoft, Amazon)
- What
- Proposed shortening of compliance timeline for data protection law
- When
- Current timeline is 18 months, proposed timeline is 12 months
- Where
- India
- Why
- To create a compliance gradient between bigger companies and smaller startups, as bigger companies already comply with strict privacy laws like GDPR
- Act
- Digital Personal Data Protection Act, 2023
- Current Compliance Timeline
- 18 months
- Proposed Compliance Timeline
- 12 months
- Significant Data Fiduciaries
- Meta, Google, Apple, Microsoft, Amazon
- Data Localization Committee
- To be formed soon
- Penalty for Data Breach
- Up to Rs 250 crore
- Parental Consent Mechanism
- To be implemented by companies
- Government Exemptions
- For national security, public order, etc.