What's New :
Intensive Mains Program for IAS 2026
28th July 2025 (17 Topics)

Data Protection & Cybersecurity Framework

Context

The Draft Digital Personal Data Protection Rules, 2025, received 6,915 inputs from citizens and stakeholders during public consultation, as part of the government's effort to operationalize the DPDP Act, 2023.

Digital Personal Data Protection (DPDP) Act, 2023:

  • It is enacted to regulate processing of digital personal data while protecting individual privacy rights.
  • It applies to Data Fiduciaries (govt/private entities) and introduces consent-based processing.
  • It replaces older IT Rules, bringing India in line with global norms like EU’s GDPR.

Draft DPDP Rules, 2025:

  • Public consultation yielded 6,915 inputs, indicating wide stakeholder engagement.
  • Rules will define implementation aspects: grievance redressal, notice formats, penalties, etc.

Key measures taken by government to strengthen cybersecurity are as follows:

  • Indian Computer Emergency Response Team (CERT-In): Nodal agency under Section 70B of the IT Act, 2000 for cyber incident response.
  • National Cyber Coordination Centre (NCCC): Coordinates real-time cyber threat intelligence among stakeholders.
  • Cyber Swachhta Kendra (CSK): Botnet cleaning and malware analysis centre providing tools to users.
  • CyberShakti Programme (2024):: Focused on training women in cybersecurity to build inclusive digital capacity.

Strategic Significance:

  • Ensures cyber-sovereignty, data localization compliance, and reduced foreign dependency.
  • Strengthens citizen trust in digital public infrastructure like DigiLocker, Aadhaar, and UPI.

PYQ:

Q. In India, the term "Public Key Infrastructure" is used in the context of  (2017)

(a)    Digital security infrastructure

(b)    Food security infrastructure

(c)     Health care and education infrastructure

(d)    Telecommunication and transportation infrastructure

X

Verifying, please be patient.

Enquire Now