In a long-awaited draft of Digital Personal Data P🐻rotection(DPDP) Rules, the Centre on Friday made parental consent and identification mandatory for creating socia🌃l media accounts for those who are below the age of 18.
The Ministry of Electroniಌcs and Information Technology (MeitY), in its notification, announced that the public is invited to submit objections and suggestions to the draft rules through the government’s citizen engagement platform, MyGov.in. The feedback will be considered after February 18, 2025.
In a long-awaited draft of Digital Personal Data P🐻rotection(DPDP) Rules, the Centre on Friday made parental consent and identification mandatory for creating socia🌃l media accounts for those who are below the age of 18.
Following the announcement, the Ministry of Electronics and Information Technology (MeitY) asked for feedback from the gener💖al public. People can raise questions and submit objections or suggestions via the government’s citizen engagement platform, MyGov.in. The feedback will be considered after February 18, 2025.
The new draft rules have set specific gui🅰delines for e-commerce ꦡentities, online gaming intermediaries, and social media intermediaries,
Children's data protection
The new draf♑t rules focus on stricter measures in a bid to ensure protection of the personal data of children and individuals with disabilities under lawful guardianship.
The rules have directed the data fiduciaries who are entrusted with handling people's perso🀅nal data to ensure receiving a verifiable consent of a parent or guardian ahead of processing any personal data belonging to minors.
The consent verification process should include government-issued IDsꦓ or digital identity tokens, such as those linked to Digital Lockers. Educational institutions and child welfare organisations, however, may be exempt from some provisions of the rules.
Enhancing consumer rights
Besides emphasizing on protecting children’s data, the draft also focused on designing rules to enhance consumer rights, allowing users to demand the deletion of their data and seek💛 transparency from companies about why their data is being collected.
Any report of data breach will amount to a penalty of up to rupees 250 crore, the Centre said. The draft also gives the consumers the provision to challenge data collection practices and demand clea🐈r explanations for data usage.
To ensure strict monitoring oᩚᩚᩚᩚᩚᩚᩚᩚᩚ𒀱ᩚᩚᩚn compliance with these rules, the government also planned to establish a Data Protection Board, which will function as a fully digital regulatory body.
According to MeitY, the board will be bestowed with the responsibilities to conduct remote hearings, investigate breaches, enforce penalties, and register consent managers. Consent managers will be required to regist𝄹er with the Boar🔯d and maintain a minimum net worth of Rs 12 crore.
These comprehensive measures aim to ensure that data fiduciaries adopt robus𝐆t technical and organisational safeguards, particularly concerning vulnerable groups like children.