Tech majors including Meta, Google, Apple, Microsoft, and Amazon are expected to be classified as significant data fiduciaries. These specific provisions require tech companies to carry out a yearly data protection impact assessment, and verify that technical measures including their algorithmic software that deal with handling personal data don’t violate users’ rights. More notably, under the rules, the Centre will specify the kind of personal data which can be processed by “significant data fiduciaries” subject to the restriction that such personal data and traffic data related to its flow is not transferred outside the territory of India. The notification of the rules came over two years after the Digital Personal Data Protection (DPDP) Act received the President’s assent in August 2023. Story continues below this adUnder the rules, tech companies are required to implement a mechanism for collecting “verifiable” parental consent before processing children’s personal data.

Source: Indian Express January 23, 2026 06:56 UTC