India's Ministry of Electronics and Information Technology published draft rules for the Personal Digital Data Protection Act of 2023 (English version begins on page 28). They contain guidance related to key parts of the act, including what notice must be given by data fiduciaries (controllers) to data principals (subjects) to obtain consent for the use of personal information; what steps fiduciaries should take to keep data secure; and how to deal with data breaches. The rules also address fiduciaries' responsibilities regarding the processing of children's personal data; the rights of data subjects; and the establishment of a Data Protection Board. Comments on the proposed rules are due Feb. 18.
Search Primer
Term list: Separate terms with spaces, not commas or semicolons.
Multi-word term: Place inside quotes to ensure an exact match (e.g. "China import").
Acronyms: Use all capital letters to ensure the search is not looking for that letter sequence instead.
Required term: If a term must be included in any resulting articles, prefix it with a plus sign (e.g., +CBP).
Excluded term: If a term should be excluded from any articles being found, prefix it with a minus sign (e.g., -ruling).
Singular form: Always use the singular form when doing multi-word terms (e.g. "russian export control" instead of "russian export controls").
Shortest word form: When you have different word forms in a quoted (multi-word) term, you want to only include the shortest version if it is the last part of the expression (e.g., "entity list" instead of "entity listing" or "entity listed").