India has published the official Digital Personal Data Protection (DPDP) Rules 2025, setting out the operational framework that will govern how personal data is collected, processed, stored, and transferred under the DPDP Act. The rules introduce a phased implementation schedule, new compliance obligations for organisations, and detailed procedures for consent, notice, breach reporting, children’s data, and cross-border transfers.

The Council of the European Union has approved a regulation that harmonises procedural standards for handling cross-border GDPR complaints. The new rules introduce common admissibility criteria, strengthen the rights of complainants and companies, and set binding deadlines to speed up investigations.