2023 年数字个人数据保护 (DPDP) 法案：政府通知 2025 年 DPDP 规则草案

布巴内斯瓦尔：随着《2023 年数字个人数据保护 (DPDP) 法案》的通过，电子和信息技术部 ((MEIT) 于周五通报了《2025 年数字个人数据保护规则草案》。

The Ministry of Electronics and Information Technology (MEIT) has notified the Draft Digital Personal Data Protection (DPDP) Rules 2025 in pursuance to the passing of the DPDP Act 2023.

随着《2023 年数字个人数据保护法》的通过，电子和信息技术部 (MEIT) 已通报《2025 年数字个人数据保护 (DPDP) 规则草案》。

As per the draft DPDP rules, social media intermediaries, like Google, Whastapp, Facebook, instagram and X, cannot open account of any minor, who is less than 18-years of age, without the consent of their parents.

根据DPDP规则草案，未经父母同意，谷歌、Whastapp、Facebook、instagram和X等社交媒体中介机构不得为任何未满18岁的未成年人开设账户。

Moreover, they have to delete the personal data of all users after three years.As per Rule 10 of the draft DPDP, a Data Fiduciary shall adopt appropriate technical and organisational measures to ensure that verifiable consent of the parent is obtained before the processing of any personal data of a child.

此外，他们必须在三年后删除所有用户的个人数据。根据 DPDP 草案第 10 条，数据受托人应采取适当的技术和组织措施，以确保在处理任何数据之前获得家长的可验证同意。儿童的个人数据。

It further said, they have to observe due diligence by checking that the minor’s parents are present physically at the time of opening the account and that they are fully aware of the implications of opening the account for the minor.

它还表示，他们必须遵守尽职调查，检查未成年人的父母在开设账户时是否在场，并且他们充分意识到为未成年人开设账户的影响。

The Data Fiduciary shall also maintain a record of the consent obtained from the parents for a period of not less than three years from the date of obtaining such consent and shall produce the same before the Central Government or any authority authorised by it, on demand.

数据受托人还应保存从父母处获得的同意记录，自获得同意之日起保存不少于三年，并应根据要求向中央政府或其授权的任何机构出示该记录。

The draft DPDP Rules 2025 in its third schedule, has clearly outlined who are social media intermediaries in India and has set a timeline to store personal data.

2025 年 DPDP 规则草案在其第三个时间表中明确概述了印度的社交媒体中介机构，并设定了存储个人数据的时间表。