The government on Friday released the draft rules under the Digital Personal Data Protection Act seeking comments from stakeholders by February 18.
The rules have proposed that all data fiduciaries shall adopt appropriate technical and organisational measures to ensure that verifiable consent of the parent is obtained before the processing of any personal data of a child and shall observe due diligence.
The draft of the rules also proposes that significant data fiduciaries, as defined under the DPDP Act, undertake an annual Data Protection Impact Assessment and present the findings to the Data Protection Board.
Discover the stories of your interest
