Union Minister of State Jitin Prasada
The government on Wednesday said it is ensuring that the Digital Personal Data Protection (DPDP) Act, 2023 is widely publicized and adopted, and also simplified the compliance framework for start-ups and certain data fiduciaries under the DPDP Act and Rules.
“The Act and Rules provide for the government to notify jurisdictions where transfer of personal data may be restricted. The government will also ensure that the DPDP Act is widely publicized and adopted by educating citizens about their rights and responsibilities,” Minister of State for Electronics and Information Technology Jitin Prasada informed the Lok Sabha on Wednesday.
Digital reach
Capacity building initiatives including workshops, conferences, expert sessions and digital outreach campaigns would also be conducted, he said.
The DPDP Act and Digital Personal Data Protection Rules, 2025 were notified on November 13, 2025. They provide timelines for implementation of the relevant provisions and with a view to providing the rules, the Digital Data Protection Board has been notified, Prasada added.
Meanwhile, responding to other queries in Parliament, Electronics and IT Minister Ashwini Vaishnaw said the DPDP Act and DPDP Rules 2025 apply uniformly to all forms of digital personal data, including personal images and data.
“The law establishes a comprehensive framework that grants individuals specific rights over their personal data. It also establishes obligations for organizations (data fiduciaries) that determine the purpose and means of processing digital personal data. The government is actively engaging social media platforms and other stakeholders to counter deepfakes, altered images and malicious synthetic content,” he said.
Several clues
He said the government has also issued several recommendations to social media intermediaries to ensure an open, secure, trustworthy and accountable digital ecosystem.
Intermediaries are particularly advised to strengthen detection and removal of unlawful and false content, including malicious synthetic media and deepfakes, he said, adding that mandatory labeling, watermarking and traceability mechanisms have also been proposed to clearly identify manipulated content generated by AI and prevent misinformation.
“Furthermore, under the IT (Amendment) Rules 2025, intermediaries are required to remove or block access to certain unlawful content within 36 hours of receiving actual knowledge through a court order or an authorized government intimation,” Vaishnaw added.
Published on December 3, 2025