According to the below link, this is not a new rule, but something the UPA government passed. This new order just lists out the agencies that can access the data, where as the original rule didn't list anyone specifically. I remember the "provide password or 7 years jail" was a thing for a while.

https://www.firstpost.com/india/mha-says-snooping-order-base...