DPDP Daily Brief — Compliance Deadline Firm; Sensitive Data Security Tightens
Top Story
DPDP compliance deadline set for May 2027 as India phases in data law
Today's Headlines
1. MeitY clears 31 more applications worth ₹7,877 crore investment under ECMS
Source: ET Government | Read Original →The Ministry of Electronics and Information Technology (MeitY) has approved 31 additional applications, committing ₹7,877 crore in investments under the Electronics Manufacturing Clusters Scheme (ECMS). This move aims to bolster India's electronics manufacturing capabilities, indirectly supporting the development of robust domestic infrastructure for data processing and storage, which could aid Data Fiduciaries in meeting data localization or processing requirements.
2. DPDP compliance deadline set for May 2027 as India phases in data law
Source: Google News DPDP | Read Original →The long-awaited official deadline for full compliance with the Digital Personal Data Protection (DPDP) Act 2023 has been set for May 2027. This crucial announcement provides Data Fiduciaries and Data Processors with a clear timeline to implement necessary changes across their data governance frameworks, from consent mechanisms to data breach response protocols.
3. CSC operators cannot store Aadhaar or banking data, MeitY tells Parliament
Source: Google News DPDP | Read Original → MeitY has informed Parliament that Common Service Centre (CSC) operators are explicitly prohibited from storing sensitive Aadhaar or banking data. This directive reinforces the principles of data minimization (Section 6) and purpose limitation (Section 5) under the DPDP Act, particularly for highly sensitive categories of personal data, underscoring the government's strict stance on data handling by entities providing citizen services.4. Crypto wallet provider SafePal discloses data breach affecting nearly 40,000 users order information
Source: Livemint Tech | Read Original →Crypto wallet provider SafePal has disclosed a significant data breach impacting order information for nearly 40,000 users. This incident highlights the critical need for robust security measures, as Data Fiduciaries under the DPDP Act are obligated to implement reasonable security safeguards (Section 8(5)) and promptly report breaches to the Data Protection Board of India (DPBI) and affected Data Principals (Section 8(6)), with potential penalties up to ₹250 crore for non-compliance.
Stay Compliant
Not sure if your business meets DPDP standards? Start with a free check:
🔍 Run Your Free DPDP Audit →16 questions. 60 seconds. Instant risk report.
Published by DPDP News, a Meridian Bridge Strategy initiative. For compliance consulting, book a free call.
Daily Email
Get DPDP News by email
One short email when a new DPDP briefing is published. No spam.