Content

1. DPDP Rules, 2025 Notified
2. Powering the AVGC-XR Revolution

---

DPDP Rules, 2025 Notified

---

Why in News?

• Government notified the Digital Personal Data Protection (DPDP) Rules, 2025 on 14 November 2025, completing the operationalisation of the DPDP Act, 2023.
• Rules framed after nationwide consultations receiving 6,915 public inputs.

Relevance :

GS2 (Governance)

• Implements DPDP Act → strengthens citizen privacy rights and grievance systems.
• Regulates State–citizen data relationship; aligns with right to privacy (Art. 21).

GS2 (Polity & Law)

• Operationalises a major digital rights law; impacts RTI–privacy balance.
• Establishes Digital Data Protection Board.

GS3 (Cybersecurity)

• Mandatory breach reporting; stronger data security norms.
• Reduces cyber vulnerabilities across digital platforms.

Basics: DPDP Act, 2023 – Foundation

• Enacted on 11 August 2023 to create a full framework for digital personal data protection.
• Based on SARAL design: Simple, Accessible, Rational, Actionable.
  Establishes:
  – Data Fiduciary
  – Data Principal
  – Data Processor
  – Consent Manager
  – Data Protection Board
• Core principles: consent, transparency, purpose limitation, data minimisation, accuracy, storage limitation, security safeguards, accountability.
  Penalties:
  – Up to ₹250 crore for failure to maintain security safeguards.
  – Up to ₹200 crore for breach notifications or violation of obligations related to children.
  – Up to ₹50 crore for other violations.

Why DPDP Rules, 2025 Were Needed

• To operationalise the Act with granular procedures.
• To create uniform standards for consent, breach notification, grievance redressal.
• To ensure citizen-centricity, legal clarity, and predictable compliance frameworks for industry.

Key Features of DPDP Rules, 2025

A. Phased Implementation

• 18-month compliance window for gradual adoption.Mandatory separate consent notices: plain language, purpose-specific.
• Consent Managers must be India-based companies.

B. Personal Data Breach Protocols

• Mandatory immediate notice to affected individuals.
• Notice must explain: nature of breach, harm, mitigation measures, help contacts.
• Parallel reporting to the Data Protection Board.

C. Transparency & Accountability Requirements

• Data Fiduciaries must display clear contact information (designated officer/DPO).
  Significant Data Fiduciaries (SDFs):
  – Independent audits.
  – Data Protection Impact Assessments (DPIAs).
  – Stricter oversight for AI, biometrics, sensitive technologies.
  – Government-mandated obligations for restricted datasets (including possible local storage).

D. Strengthening Rights of Data Principals

• Rights operationalised through explicit timelines and formats:
  – Access, correction, update, erasure rights.
  – Right to receive copies of personal data.
  – Right to nominate another person.
• Mandatory response within 90 days by Data Fiduciaries.

E. Digital-First Data Protection Board

• 4-member, fully digital Board:
  – Online complaint filing.
  – Case tracking via portal & mobile app.
  Appeals to TDSAT.

How DPDP Rules Empower Citizens

• Consent-centric model: explicit, informed, withdrawable anytime.
• Clear visibility into what data is collected and why.
• Data lifecycle rights: access, correction, update, erasure.
• Early breach alerts → empowers citizens to mitigate harm.
• Designated grievance contact mandatory for all organisations.
  Enhanced safeguards for:
  – Children: verifiable parental consent (exceptions: healthcare, education, real-time safety).
  – Persons with disabilities: lawful guardian consent where required.

Alignment with the RTI Act

• DPDP revises Section 8(1)(j) of RTI to integrate privacy protections.
• Based on SC’s Puttaswamy (2017) judgment – privacy as a fundamental right.
• Protects personal information while preserving transparency regime.
• Section 8(2) RTI continues to allow disclosure when public interest outweighs privacy harm.
• Removes ambiguity between privacy rights vs. right to access public information.

Implications for Stakeholders

A. Citizens

• Stronger control → consent, correction, deletion, nomination.
• Enhanced breach transparency.
• Simplified grievance redressal.

B. Businesses & Startups

• Longer compliance runway (18 months).
• Reduced ambiguity through standardised notices and timelines.
• Higher compliance cost for SDFs due to audits & DPIAs.

C. Government

• Strengthens trust in digital governance.
• Builds regulatory capacity via digital Board.
• Harmonises national privacy regime with global best practices.

Comparison with Global Frameworks

• Similar to GDPR in consent, breach reporting, principals’ rights.
• More simplified and India-specific: SARAL, 90-day response period, lighter obligations for MSMEs.
• Less categorisation of data (no “sensitive data” category unlike GDPR).

Critical Analysis

Strengths:
– Clarity, plain language, graded obligations.
– Faster enforcement via digital processes.
– Strong penalties ensure deterrence.
Concerns:
– Government power to mandate storage/restricted processing may raise surveillance concerns.
– Absence of independent DPA (Board appointed by govt).
– Child consent requirements may burden edtech, gaming sectors.
– No localisation as default → cross-border flows depend on govt notifications.

---

Powering the AVGC-XR Revolution

---

Why in News?

• PIB released a detailed update on India’s AVGC-XR ecosystem, highlighting IICT’s operationalisation, global partnerships, WAVES Summit outcomes, state-level AVGC policies, and rapid expansion of India’s creative-tech economy.
• India positions the AVGC-XR sector as a core driver of its USD 100 billion media & entertainment vision for 2030.

Relevance :

GS2 (Governance)

• IICT, AVGC Task Force, and new policies shaping India’s creative-tech ecosystem.
• Reforms under Cinematograph (Amendment) Act, 2023.

GS3 (Economy)

• Sunrise sector; M&E industry projected to cross USD 100 bn.
• High employment and export potential.

GS3 (Science & Tech)

• Growth of AR/VR/XR, virtual production, real-time rendering.
• Collaboration with global tech firms (Meta, Google, NVIDIA).

Basics: AVGC-XR Sector

• AVGC-XR = Animation, Visual Effects (VFX), Gaming, Comics, Extended Reality (AR/VR/MR).
• Role: High-value digital content, tech-driven storytelling, global outsourcing hub, cultural diplomacy, innovation backbone for media & entertainment.

India’s Media & Entertainment (M&E) Sector – Snapshot

• Sunrise industry; projected to cross USD 100 billion by 2030.
• Current projection: ₹3,067 billion by 2027 (CAGR ~7%).
• Contributes significantly to GVA and job creation.
• Cost advantage: 40–60% in VFX/animation vis-à-vis global studios.
• 25% OTT viewership from overseas, boosting India’s soft power.

Strategic Pillars Driving Growth

• Talent Development: Skilling, global-standard curricula, industry tie-ups.
• Infrastructure: Production clusters, AVGC hubs, NCoE, IICT.
• Innovation & Industry: Start-up accelerators, XR applications, co-productions.
• Inclusive Participation: Regional language content & creative clusters.

Genesis of the AVGC-XR Push

• 2022: AVGC Promotion Task Force formed; recommended National AVGC-XR Mission with “Create in India” focus.
• Projection: ~20 lakh direct/indirect jobs in 10 years.
• Aim: Make India a global digital content creation hub.

IICT – Indian Institute of Creative Technologies

Institutional Milestones

• May 2025: IICT formalised as Section 8 not-for-profit company.
• Global partners: Google, Meta, YouTube, NVIDIA, Adobe, Microsoft, Wacom, JioStar.
• July 2025: Courses launched; MoU with University of York for global benchmarking.
• July 18, 2025: First campus inaugurated at NFDC Complex, Mumbai (Budget: ₹400 crore).
• August 2025: WaveX Startup Incubator launched – first cohort of 15 start-ups.
• October 2025: MoU with FICCI + Netflix under Netflix Fund for Creative Equity.

Functions

• Skilling + R&D + incubation + industry-education integration.
• Globally benchmarked content-creation & tech curriculum.

National Centre of Excellence (NCoE) for AVGC-XR

• Approved 2024; apex national body for training, research, industry collaboration.
• Modern curriculum, joint R&D, global linkages.

State-Level Policy Momentum

Karnataka – AVGC-XR Policy 2024–29

• Skilling ecosystem, incubation, export competitiveness, clusters.

Maharashtra – AVGC-XR Policy 2025 (₹3,268 crore)

• Long-term roadmap till 2050.
• Focus on investments, jobs, dedicated production clusters.

Key Policy and Legislative Reforms

1. Cinematograph (Amendment) Act, 2023

• Anti-piracy (Sections 6AA & 6AB):
  • Jail up to 3 years; fines up to 5% of audited production cost.
• Government empowered to direct intermediaries to remove pirated content.
• Permanent film certification + age-based categories.
• Supports content integrity + industry growth.

2. National Broadcasting Policy (Under formulation)

• Framework for content diversity, competition, ethical standards.
• Promotes digital broadcasting, IP protection, global presence.

3. India Cine Hub (NFDC)

• Single-window clearance for film shooting in India.
• Integrates permissions + incentives → boosts India’s film facilitation ecosystem.

WAVES – World Audio Visual & Entertainment Summit (2025)

• Inaugural edition: 1–4 May 2025, Mumbai.
• PM inaugurated; global participation.
• Outcomes:
  • WAVES Declaration on Global Media Cooperation.
  • ₹1,328 crore business pipeline.
  • ₹50 crore investment pool for WaveX startups.
• India positioned as global M&E hub under Viksit Bharat 2047.

Technological Evolution & Impact

• Early VFX capability: Ra.One (2011), Baahubali (2015), Brahmastra (2022).
• Current capabilities: real-time rendering, volumetric capture, virtual production.
• Indian studios now handle high-end global projects.

Global Projects Handled by Indian Studios

• Avatar: 200+ VFX shots.
• Game of Thrones: Dragon animations.
• Thor: The Dark World: Major VFX work.
• RRR: 2,800+ VFX shots; sophisticated workflows.

Skilling & Workforce Development

• MESC leading training, competency standards, modular courses.
• Produces employable workforce in animation, VFX, gaming, XR, post-production.

Innovation and Enterprise

Gaming Industry

• Indian titles gaining traction: BGMI, FAU-G, Indus Battle Royale, Raji.
• Growing investor interest; shift from outsourcing → IP creation.

Comics & Indian IPs

• Classic characters (Suppandi, Chacha Chaudhary, Shikkari Shambhu) being adapted into animation and series.
• Strong potential for transmedia storytelling.

Academic–Industry Convergence

• IICT + NCoE + state-level clusters.
• Joint research, industry-designed curricula, incubation for media-tech startups.
• WaveX + T-Hub partnership → innovation hubs for AVGC-XR.

The Road Ahead

Animation & VFX

• Fiscal incentives + CoEs to position India as post-production hub.
• Global co-productions & IP-led animation.

Gaming & eSports

• Structured tournaments + ethical frameworks.
• Start-up funding for gaming ed-tech, med-tech, health-tech applications.

XR & Immersive Tech

• Scale XR in education, defence, tourism, healthcare.
• Standards for accessibility & interoperability.

Comics & Digital IP

• Digitisation + new franchises + cross-platform storytelling.
• Strong alignment with cultural heritage.

Cross-Sectoral Enablers

• Integrate AVGC-XR into higher education & vocational training.
• National talent registry + certification standards.
• IP protection, co-production treaties, global market access.
• “Create in India” + “Brand India” promotion for digital content exports.