Legal Register
RULE-2 Tranche 1 (13 Nov 2025) — In Force
Status: in force
Rule 2: Definitions
A user account is not restricted to login/password account.
Subordinate Trigger
Definitions
Applies to: All actors
Rule Prescriptions
User account extends to listed presences; verifiable consent refers r10/11; Act definitions apply.
Exceptions & Provisos
Unless context otherwise requires.
Official Gazette Text (Verbatim Rules Publication)
Ministry of Electronics and Information Technology, Digital Personal Data Protection Rules, 2025.
2. Definitions. — (1) In these rules, unless the context otherwise requires, –
(a) “Act” means the Digital Personal Data Protection Act, 2023 (22 of 2023);
(b) “techno-legal measures” means as referred to under rules 20 and 22;
(c) “user account” means the online account registered by the Data Principal with the Data Fiduciary, and
includes any profiles, pages, handles, email address, mobile number and other similar presences by means
of which such Data Principal is able to access the services of such Data Fiduciary; and
(d) “verifiable consent” means a consent as specified in rule 10 or 11.
(2) The words and expressions used in these rules and not defined, but defined in the Act, shall have the
same meanings respectively assigned to them in the Act.
Mapped Operational Controls (2)
Enterprise obligations in the Control Master Matrix implementing this subordinate rule.
OBL-53 SPEC-Q10-OBL-53
Appellate Tribunal Appeal Procedure (Rule 22)
Governs appeals before TDSAT, statutory deposit requirements, and limitation periods (Rule 22).
Owner: Legal / board secretariat Open Workpaper →
OBL-54 SPEC-Q10-OBL-54
Government Information Requisitions & Inquiries (Rule 23)
Responds to Central Government statutory information calls for Seventh Schedule purposes.
Owner: Legal / board secretariat Open Workpaper →