Data Card
India Operationalizes Digital Personal Data Protection Act with ‘SARAL’ Rules
India finalized ‘SARAL’ rules to operationalize the DPDP Act, clarifying obligations on consent, processing, and redress that affect digital identity onboarding and verification workflows.
2025-11-17CC-BY-4.0policyprivacycompliance
About
Key Facts
- Rules complete the DPDP Act’s operational framework
- Impacts consent and retention in ID flows
- Raises compliance stakes for IDV providers
Card Text
Clear privacy rules influence how digital ID systems capture and retain attributes, driving changes to consent UX, audit logging, and data minimization.