The Indian government has announced the Digital Personal Data Protection Rules 2025, set for phased implementation over 12-18 months, aimed at enhancing citizen control over personal data and privacy. These rules, which follow the recognition of the Right to Privacy as a fundamental right by the Supreme Court in 2017, will establish a Data Protection Board empowered to impose penalties for data breaches while incorporating a graded penalty system to safeguard small businesses. Key provisions include mechanisms for individuals to report unauthorized data usage and protections against spam calls, while exemptions apply in cases involving legal enforcement and certain government-related data processing. This development underscores India’s commitment to robust data governance amidst increasing digitalization.