---
title: "India Moves Closer to Enforcing Data Protection Law: MeitY Completes Review of Public Feedback "
date: 2025-07-29
author: "Aditi Rana"
url: https://www.indialaw.in/blog/civil/india-rollout-of-data-protection-law/
---

# India Moves Closer to Enforcing Data Protection Law: MeitY Completes Review of Public Feedback 

Posted On - 29 July, 2025 •

By - [Aditi Rana](https://www.indialaw.in/author/aditi-rana/ "Posts by Aditi Rana") and [Rahul Sundaram](https://www.indialaw.in/people/rahul-sundaram/ "Posts by Rahul Sundaram")

[![a computer keyboard with a padlock on top of it - Data Protection Law](https://www.indialaw.in/wp-content/uploads/2t4l02zyj-k.jpg)](https://www.indialaw.in/wp-content/uploads/2t4l02zyj-k.jpg)

## Introduction: MeitY Signals Readiness to Operationalise India’s Data Protection and Cybersecurity Framework 

On July 28, 2025, the Ministry of Electronics and Information Technology (MeitY) issued an official update regarding the status of two major regulatory initiatives: the Digital Personal [Data Protection](https://www.indialaw.in/expertise/technology-law/data-protection-and-privacy/) Rules, 2025 and India’s National Cybersecurity Strategy. The update confirms that MeitY has concluded the public consultation process for the draft rules under the Digital Personal Data Protection Act, 2023 (DPDP Act), having received 6,915 responses, and is in the process of finalising the regulatory framework to bring the law into effect. 

This development is significant as it marks India’s transition from legislative intent to enforceable obligations in the areas of data privacy and cybersecurity governance. 

## Background: The Road to Implementation 

The DPDP Act, 2023, enacted in August 2023, provides the statutory framework for lawful processing of digital personal data in India. While the Act has been notified, its provisions are not yet in force. On January 3, 2025, MeitY released the Draft Digital Personal Data Protection Rules, 2025 for public consultation. The July 28 update confirms that the feedback phase has concluded and that the Ministry is now reviewing the submissions to finalise the rules. 

## Key Takeaways from the July 28, 2025 MeitY Update 

1. **Public Consultation on Draft Rules Concluded **

MeitY confirmed that it received 6,915 responses to the Draft Digital Personal Data Protection Rules, 2025, from a wide spectrum of stakeholders including industry, academia, civil society, and individuals. These responses are under detailed examination and will inform the finalisation of the rules. 

1. **Enforcement of DPDP Act Linked to Rule Notification** 

The update reiterates that the DPDP Act, 2023 will be brought into force only after the final rules are notified. MeitY is currently developing standardised formats for privacy notices, consent mechanisms, and breach reporting. It is also preparing to establish the Data Protection Board of India, which will play a key role in implementation and enforcement. 

1. **National Cybersecurity Strategy ** 

MeitY is actively developing a comprehensive National Cybersecurity Strategy aimed at enhancing national cyber resilience. It will focus on strengthening key institutions including CERT-In (under Section 70B of the IT Act, 2000), National Critical Information Infrastructure Protection Centre (NCIIPC), and the National Cyber Security Coordinator. 

1. **Cyber Awareness and Capacity-Building Initiatives** 

The update outlines a range of initiatives undertaken to build public awareness and institutional capability. These include: 

- Observance of Cybersecurity Awareness Month and Safer Internet Day; 

- Multilingual outreach through regional language campaigns; 

- The CyberShakti initiative, which promotes women’s participation in cybersecurity; and 

- The ISEA Programme, which has trained over 8 lakh individuals through 3,600+ workshops. 

1. **Tools and Portals for Citizen Cyber Hygiene** 

MeitY highlights public-facing tools such as the Cyber Swachhta Kendra (CSK), which offers malware cleaning utilities and promotes safe computing practices. Citizens are also directed to www.safeonline.in, maintained by CERT-In, for guidance on cyber hygiene and incident reporting. 

1. **Continuity of Existing Security Obligations** 

Until the DPDP Act is notified, the existing Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 continue to govern data security obligations. These remain in force and are supported by the institutional ecosystem referenced in the update. 

## Implications for Businesses and Digital Entities 

The July 28 update is an inflection point for the compliance landscape in India. It provides regulatory certainty that: 

- The rules will be notified soon, and the [DPDP Act](https://www.dpdpa.in/) will come into force thereafter; 

- Entities processing personal data will soon be subject to enforceable compliance obligations; 

- Breach reporting, DPO appointments, data retention policies, and cross-border data transfer governance will become legally binding; 

- Enforcement mechanisms through the Data Protection Board of India will be activated, with potential penalties up to ₹250 crore per instance of non-compliance. 

Businesses operating in sectors such as e-commerce, financial services, ad-tech, healthcare, social media, and ed-tech, especially those engaging in profiling or cross-border processing should prioritise internal readiness. 

## Conclusion 

MeitY’s July 2025 update is a clear indication that India is entering the implementation phase of its personal data protection and cybersecurity law framework. Once the final rules are notified, the DPDP Act will move from a legislative instrument to an enforceable statute, bringing with it a structured compliance ecosystem. 

Entities that rely on digital personal data, whether of consumers, employees, or business partners must act swiftly to align with the upcoming requirements. This includes reviewing internal data flows, updating privacy notices and policies, implementing breach response protocols, and ensuring board-level visibility of data governance. 

For more details, write to us at: [contact@indialaw.in](mailto:contact@indialaw.in) 

[Data Protection and Privacy](https://www.indialaw.in/expertise/technology-law/data-protection-and-privacy/)

---

# IndiaLaw LLP — Offices & Contact Details

---

## General Contact

| | |
|---|---|
| **Website** | https://www.indialaw.in |
| **Primary email** | contact@indialaw.in |
| **Primary phone** | +91 836-9995919 |
| **Contact form** | https://www.indialaw.in/connect/ |
| **Careers (separate channel)** | https://www.indialaw.in/careers/ |


---

## All Offices (9 locations across 8 cities)

### 1. Mumbai — Registered Office & Head Office (Apeejay Chambers)

| | |
|---|---|
| **Address** | Apeejay Chambers, Ground Floor, Wallace Street, Fort, Mumbai – 400 001 |
| **Phone** | [022-6924-7400](tel:02269247400) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/mumbai/ |
| **Practice focus** | Litigation · Arbitration · Insolvency & Bankruptcy · Corporate · Banking · Real Estate · IP |
| **Notes** | The HQ. 5 partners based here. Handles PAN-India litigation, arbitration, corporate, banking, IP and real estate practice. Largest team across all offices. |

### 2. Mumbai — Non-Litigation Office (Excelsior, Fort)

| | |
|---|---|
| **Address** | 4th Floor, New Excelsior Theatre Pvt. Ltd., Amrit Keshav Nayak Marg, Fort, Mumbai – 400 001 |
| **Phone** | [022-697-40500](tel:022-697-40500) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/mumbai/ |
| **Practice focus** | Non-litigation only — consultations, negotiations, transactional work |
| **Notes** | Opened 2024. Litigation and arbitration remain at the Apeejay Chambers head office. |

### 3. Delhi

| | |
|---|---|
| **Address** | Flat No. 1107 & 1108, Prakashdeep Building, Tolstoy Marg, Connaught Place, New Delhi – 110 001 |
| **Phone** | (general line: +91 836-9995919) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/delhi/ |
| **Practice focus** | Litigation · Arbitration · Insolvency & Bankruptcy · Corporate · Banking · Real Estate |
| **Notes** | 3 partners based here. Located near the Supreme Court of India, Delhi High Court and other appellate bodies. |

### 4. Kolkata

| | |
|---|---|
| **Address** | Centre Point Building, Room No. 214, 2nd Floor, Premises No. 21, Hemanta Basu Sarani, Opp. Great Eastern Hotel, P.S. Hare Street, Kolkata – 700 001, West Bengal |
| **Phone** | [+91 33 4813 1001](tel:+913348131001) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/kolkata/ |
| **Practice focus** | Insolvency & Bankruptcy · Commercial & Civil Litigation · Arbitration · Banking Litigation · Real Estate · Labour & Employment · Consumer |
| **Notes** | Advises banks, NBFCs, MSMEs and corporates on transactions and dispute resolution. Works in close coordination with the Mumbai HO. |

### 5. Chennai

| | |
|---|---|
| **Address** | GF-A, 19 Casa Major Road, Egmore, Chennai – 600 008 |
| **Phone** | (general line: +91 836-9995919) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/chennai/ |
| **Practice focus** | Litigation · Insolvency & Bankruptcy · Real Estate |
| **Notes** | Full-fledged office with experienced legal team. Supported by Mumbai HO. |

### 6. Bengaluru (Bangalore)

| | |
|---|---|
| **Address** | INDIALAW LLP, No. 7 Chinnaswamy Mudaliar Road, Shivaji Nagar, Bangalore – 560 051 |
| **Phone** | [080-4167-2444](tel:08041672444) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/bengaluru/ |
| **Practice focus** | Litigation · Insolvency & Bankruptcy · Real Estate · Family Laws · Labour |
| **Notes** | Located near Bangalore High Court. Handles corporate, commercial, banking and matrimonial disputes. |

### 7. Hyderabad

| | |
|---|---|
| **Address** | 403, 4th Floor, Sanatana Ecstasy Building, beside Tanishq Show Room, Himayathnagar, Hyderabad – 500 029, Telangana |
| **Phone** | [040-6666-5166](tel:04066665166) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/hyderabad/ |
| **Practice focus** | Litigation · Banking · Insolvency & Bankruptcy · Real Estate |
| **Notes** | Particularly well known for complex banking matters and real estate transactions. |

### 8. Cochin (Kochi)

| | |
|---|---|
| **Address** | Second Floor, Pulikkal Building, K.K. Padmanabhan Road, Ernakulam North – 682 018, Kerala |
| **Phone** | [0484-3583961](tel:04843583961) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/cochin/ |
| **Practice focus** | Litigation · Insolvency & Bankruptcy · Real Estate |
| **Notes** | Commercial disputes, property litigation, financial-claim arbitrations and real estate transactions. |

### 9. Noida (NCR)

| | |
|---|---|
| **Address** | No. 16 & 17, Silver Offices, 17th Floor, Wave One, Sector 18, Noida – 201 301 |
| **Phone** | (general line: +91 836-9995919) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/noida/ |
| **Practice focus** | Aviation · Insurance · Mergers & Acquisitions · Corporate |
| **Office head** | **Mr. Dinesh Gupta** (joined August 2025 to lead and expand the corporate practice) |
| **Notes** | Newest office. Sector-focused on highly regulated industries serving NCR-based clients. |

---

## Quick-Dial Phone List

| Office | Phone |
|---|---|
| Mumbai HO (Apeejay) | 022-6924-7400 |
| Mumbai Excelsior | 022-697-40500 |
| Kolkata | +91 33 4813 1001 |
| Bengaluru | 080-4167-2444 |
| Hyderabad | 040-6666-5166 |
| Cochin | 0484-3583961 |
| **General / Marketing line** | **+91 836-9995919** |

Delhi, Chennai and Noida route through the general number.

---

## Social Channels

- LinkedIn: https://www.linkedin.com/company/indialaw
- X / Twitter: https://twitter.com/Indialawmumbai
- Facebook: https://www.facebook.com/indialawllp/
- Instagram: https://www.instagram.com/indialawllp

---