How are data and cybersecurity laws/regulations implemented?
Last review date: 20 December 2024
☒ omnibus – all personal data
☒ sector-specific — e.g., financial institutions, governmental bodies
☒ constitutional
What are the key cybersecurity laws and regulations?
Last review date: 20 December 2024
- Information Technology (The Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rules, 2013 (CERT-In Rules)
- Notification of the Ministry of Electronics and Information Technology, Government of India No. 20(3)/2022-CERT-In dated 28 April 2022 (in effect since 28 June 2022) (Cyber Security Directions)
What are the key laws and regulations relating to non-personal data?
Last review date: 20 December 2024
Are new or material changes to those key data and cybersecurity laws anticipated in the near future?
Last review date: 20 December 2024
Yes
While the DPDP Act has been published, the rules and regulations required for its effective implementation and enforcement have yet to be notified. Once the government of India takes further actions, including notifying the provisions of the DPDP Act and the rules and other legislation, the DPDP Act will become operative and enforceable.
Although the specific timeline for the notification of these rules remains uncertain, it is expected to occur in 2025.