How New Data Protection Laws Affect Social Media Users in India

CopilotPerplexityChatGPTDeepSeekGoogleGrokGemini

Highlights

• India’s new data protection law changes how your personal data is collected, stored, and shared.
• Social media platforms must now delete inactive accounts and protect minors.
• Users can control what happens to their data, including asking for deletion.
• Penalties for violations are higher than ever.
• Parental consent is a must for anyone under 18.

New Law and Why It Matters

In August 2023, the Digital Personal Data Protection Act (DPDP Act) became law. It aims to give people more power over their personal data and hold companies accountable for how they use it. For social media users, this means more control, better security, and stronger rights.

What Social Media Platforms Must Do

• Delete inactive accounts after three years, but only after sending you a warning.
• Report data breaches to the government within 72 hours.
• Get your consent before collecting or using your data.
• Protect minors by asking for parental consent before anyone under 18 can use the platform.
• Avoid targeted ads for minors and stop tracking their activity.

For example, if you stop using Instagram for three years, the company must inform you before deleting your account and all linked data.

Your Rights as a User

• Ask a platform to delete your data at any time.
• Correct information about you if it’s wrong.
• Withdraw consent for data use.
• File complaints if a company mishandles your information.

These rights apply to all platforms that operate in India, whether they are Indian or foreign companies.

Special Protection for Minors

Anyone under 18 will need their parent or guardian’s permission to sign up for a social media account. Platforms must also stop using minors’ data for personalised ads or tracking. This could mean changes in how teenagers use apps like Instagram, Snapchat, or YouTube.

Who Enforces the Rules?

The Data Protection Board of India is responsible for handling complaints, investigating violations, and issuing penalties. Companies that break the law can face large fines running into several crore rupees.

What This Means for You

• If you care about privacy, you’ll have more ways to protect yourself online.
• If you are under 18, you will need parental consent to use social media legally.
• You should start checking privacy settings and keeping your accounts active if you don’t want them deleted.
• Companies will be more cautious about how they use and store your data.

FAQs

1. Is the law already active?
Yes, the DPDP Act was passed in 2023, and its detailed rules started coming into effect in 2025.

2. Can companies still send my data abroad?
Only if it follows government-approved rules on cross-border transfers.

3. What if a company refuses to delete my data?
You can complain to the Data Protection Board, which will investigate and can impose penalties.

4. How will parental consent work?
Platforms may verify using official ID or other secure methods before allowing minors to use their services.

5. Will this stop spam and fake ads?
It will make it harder for companies to target you without permission, but it may not remove all spam instantly.