New Delhi, Nov. 14 -- The union Government has notified rules for the Digital Personal Data Protection (DPDP) Act, operationalising India's first digital privacy law.

With the new rules coming into play, social media and internet intermediaries, and any other companies that deal in user data must provide data principals, or users, with an itemised description of their personal data to obtain their consent and specify the purpose for which their data will be used.

As per the DPDP Act, the new rules give companies and other stakeholders up to 18 months to comply with the administrative guidelines under the Act. Consent managers have up to 12 months to register to act on behalf of users.

The new rules also classify digital intermediaries ba...