The draft rules of the Digital Personal Data Protection Act 2023 mandate parental consent for children under 18 to access social media in India. The rules require deletion of inactive user data after three years and reporting data breaches within 72 hours. Significant data fiduciaries must conduct annual data protection assessments and audits.
