The proposal is part of draft executive rules of the Digital Personal Data Protection (DPDP) Act, which was ratified as a law in August this year. ET has seen a copy of the draft rules, which will be floated for discussion among stakeholders shortly.
