IAMAI Urges MeitY to Maintain 18-Month DPDP Timeline, Warns of 'Immense Disruptions'

• The Internet and Mobile Association of India (IAMAI) opposes MeitY's proposal to fast-track compliance timelines for the Digital Personal Data Protection (DPDP) framework.
• IAMAI, representing tech giants like Google, Meta, Amazon, and Apple, states that advancing the 18-month schedule would cause "immense business disruptions" and regulatory uncertainty.
• The association highlights that companies need more time to restructure internal systems, governance frameworks, and address technical readiness for DPDP compliance, especially for entities designated as Significant Data Fiduciaries (SDFs).
• IAMAI objects to immediate implementation of Rule 15 (cross-border data transfers) and Rule 23 (information requests), citing lack of clarity on mechanisms and need for new internal processes.
• Concerns were also raised regarding the three-month timeline for Rule 8(3) (data retention and logs), which IAMAI deems technically and operationally infeasible due to broad definitions.