India, Nov. 15 -- When the Government of India notified the Digital Personal Data Protection (DPDP) Rules, 2025, it closed the loop on a privacy framework nearly seven years in the making. Together with the DPDP Act, 2023, the rules shift India from broad policy intent to operational accountability, marking one of the most significant overhauls in the country's digital governance architecture since Aadhaar.

This is no longer about drafting a law. It is about transforming how organisations understand, manage and honour personal data. It marks India's shift into what experts describe as the era of performance-led privacy.

The new rules operationalise SARAL - Simple, Accessible, Rational and Actionable - a design philosophy meant to keep t...