The Lok Sabha on December 05, 2025, issued the Digital Personal Data Protection (Amendment) Bill, 2024, to further amend the Digital Personal Data Protection Act, 2023.
The following has been amended, namely: -
• The Bill strengthens protections for children’s personal data by requiring data fiduciaries to obtain verifiable parental consent before processing the data of children and persons with disabilities who have guardians, with strict digital age-verification mechanisms.
• It introduces new provisions for data minimisation, limiting retention and mandating deletion of children’s personal data when purposes are fulfilled, or consent is withdrawn.
• Data fiduciaries handling substantial children’s data shall conduct annual Data Protection Impact Assessments (DPIAs) and submit them to the Data Protection Board to identify and mitigate privacy risks.
• The Bill also clarifies that in disputes over exercising the right to erasure, the Data Protection Board will decide between parent/guardian and child once the child reaches 18.
• Overall, the amendments aim to enhance privacy safeguards, oversight, and accountability when processing minors’ data.
[Bill No. 277 of 2024]
