Reading the draft Data Rules

A draft rule is not yet law, and that is precisely why it deserves attention. The window between a draft and its notification is the one moment when a company's position can be entered into the record — considered, in writing, before the text hardens. The recent draft circulated by the Ministry of Electronics and Information Technology is a case in point.

What the draft changes

The draft touches cross-border data flows, classification of sensitive categories, and the obligations placed on entities that process data at scale. For most of our clients the operative question is narrow and practical: which of our existing flows fall inside the new categories, and what would compliance require in operational terms?

That translation — from statutory language to operational consequence — is the work. A rule that reads abstractly on the page can mean a re-architected data pathway, a new localisation requirement, or simply a documentation obligation that did not exist before. The differences matter, and they are knowable from the text.

The representation timeline

Consultation windows are short and they do not move. A considered response runs on a fixed sequence:

1. Read the draft against the client's actual data flows.
2. Identify the specific provisions that create operational or commercial consequence.
3. Draft a written representation that is precise, evidenced and limited to what can be substantiated.
4. File it through the correct channel, within the comment window, with a record of submission.

Each step has a date attached to it, and the last one is immovable. A representation filed after the window has closed is not a representation. It is a memo to oneself.

We do not claim to influence the outcome. We claim only that being on the record, in time, with a substantiated position, is better than the alternative.

The alternative is to read the final rule when it is notified and adjust. That is a legitimate choice. It is simply a more expensive one, made later, with less room to move.