2023 年數位個人資料保護 (DPDP) 法案：政府通知 2025 年 DPDP 規則草案

布巴內斯瓦爾：隨著《2023 年數位個人資料保護 (DPDP) 法案》的通過，電子和資訊技術部 ((MEIT) 於週五通報了《2025 年數位個人資料保護規則草案》。

The Ministry of Electronics and Information Technology (MEIT) has notified the Draft Digital Personal Data Protection (DPDP) Rules 2025 in pursuance to the passing of the DPDP Act 2023.

隨著《2023 年數位個人資料保護法》的通過，電子與資訊科技部 (MEIT) 已通報《2025 年數位個人資料保護 (DPDP) 規則草案》。

As per the draft DPDP rules, social media intermediaries, like Google, Whastapp, Facebook, instagram and X, cannot open account of any minor, who is less than 18-years of age, without the consent of their parents.

根據DPDP規則草案，未經父母同意，Google、Whastapp、Facebook、instagram和X等社群媒體中介機構不得為任何未滿18歲的未成年人開設帳戶。

Moreover, they have to delete the personal data of all users after three years.As per Rule 10 of the draft DPDP, a Data Fiduciary shall adopt appropriate technical and organisational measures to ensure that verifiable consent of the parent is obtained before the processing of any personal data of a child.

此外，他們必須在三年後刪除所有使用者的個人資料。個人資料。

It further said, they have to observe due diligence by checking that the minor’s parents are present physically at the time of opening the account and that they are fully aware of the implications of opening the account for the minor.

它還表示，他們必須遵守盡職調查，檢查未成年人的父母在開設帳戶時是否在場，並且他們充分意識到為未成年人開設帳戶的影響。

The Data Fiduciary shall also maintain a record of the consent obtained from the parents for a period of not less than three years from the date of obtaining such consent and shall produce the same before the Central Government or any authority authorised by it, on demand.

資料受託人還應保存從父母處獲得的同意記錄，自獲得同意之日起保存不少於三年，並應根據要求向中央政府或其授權的任何機構出示該記錄。

The draft DPDP Rules 2025 in its third schedule, has clearly outlined who are social media intermediaries in India and has set a timeline to store personal data.

2025 年 DPDP 規則草案在其第三個時間表中明確概述了印度的社群媒體中介機構，並設定了儲存個人資料的時間表。