MeitY released draft rules specifying obligations of data fiduciaries, consent manager framework, and grievance redressal mechanisms. Public can submit comments at the official consultation portal. Key provisions include data localisation requirements for significant data fiduciaries and breach notification timelines.