Privacy, compliance & data protection, decoded
Actionable guides on the DPDP Act 2023, consent management, and building data practices your customers can trust.
India's DPDP November Deadline: With Five Months Left, 80% of Businesses Are Unprepared
India's DPDP Act Consent Manager deadline lands November 13, 2026. New data shows 80% of businesses haven't updated privacy frameworks — and the regulator has no permanent leadership.
India's Privacy Law Is Silencing the Right to Information — and the Supreme Court Must Now Choose
India's DPDP Act amended RTI's Section 8(1)(j), removing the public-interest override. RTI rejections have risen 35%. A five-judge bench will now decide.
India Plans a Dedicated AI Law as RBI's Model Risk Framework Hits a July 24 Deadline — The DPDP Act Alone Is No Longer Enough
India's IT Secretary confirmed a separate AI law is being drafted as RBI's model risk management guidance closes July 24. Here's what DPDP-compliant businesses must do now.
IDfy Beats Jio in India's First DPDP Consent Challenge — and the Real Story Is What Got Tested
MeitY's DPDP Innovation Challenge crowned IDfy over Jio on July 8. The evaluation criteria reveal exactly what consent compliance must look like before November 2026.
Instagram CSAM Ads Trigger India's New 3-Hour Takedown Rule — and the DPDP Act's Child Data Clause Is Next
MeitY's notice to Meta over Instagram CSAM ads is the first live test of India's 2026 IT Rules takedown mandate and an early warning for DPDP child data compliance.
WhatsApp Usernames Blocked in India: Why the DPDP Act Makes Every New Feature a Compliance Event
India froze WhatsApp's username rollout for 500M+ users, extended Meta's reply deadline to July 9. Here's why DPDP Act makes usernames personal data.
How a Delhi HC Ruling Weaponised the DPDP Act Against Domain Privacy—and Why GoDaddy Is Fighting Back
The Dabur India v. Ashok Kumar judgment ended WHOIS privacy defaults in India. Now GoDaddy's July 16 appeal could reshape internet privacy worldwide.
Delhi HC's Landmark Right to Be Forgotten Ruling: A Privacy Precedent That Arrived Before the DPDP Act Could
India's Delhi High Court issued a 144-page right to be forgotten framework on May 29. Here's what it means for businesses, citizens, and the DPDP Act.
India's Consent Manager Deadline Is Four Months Away — and 1,800 GCCs Are Unprepared
The DPDP Act's consent manager framework activates November 13, 2026. A new legal analysis warns India's GCCs face a unique infrastructure problem no one has solved.
Uber's 'Record My Ride' Is the DPDP Act's First Real Consent Test — and India Doesn't Have a Clean Answer
Uber launched in-cabin video recording across 10 Indian cities on June 30. Under India's DPDP Act, notifying a passenger is not the same as getting their consent.
India's DPDP Act Has a Data Sovereignty Blind Spot — Aadhaar in Google Wallet Just Exposed It
India's DPDP Act can't stop the US CLOUD Act from compelling Aadhaar data held by American firms. Here's the structural sovereignty gap India must urgently fix.
India's IT Rules and DPDP Act Are Forcing Businesses to Delete and Retain User Data at the Same Time
India's Draft IT Second Amendment Rules 2026 mandate 180-day data retention while the DPDP Act requires erasure when consent lapses — with no statutory fix in sight.
DigiLocker Just Stored the Identity Data of 37 Crore Indians — and the DPDP Act Barely Touches It
India expanded DigiLocker to cover 37 crore citizens' Family IDs in June 2026. The DPDP Act's government exemptions leave this massive data infrastructure largely unaccountable.
India's Data Protection Board Finally Has Leadership — And the Enforcement Clock Is Now Running
India appointed the Data Protection Board's first chairperson on June 6, 2026. With 80% of companies still non-compliant, here's what this means for Indian businesses.
Tata Electronics Breach: India's DPDP Act Gets Its First Major Stress Test
The Tata Electronics ransomware breach — 630 GB, Apple and Tesla data, employee passports — puts India's DPDP breach notification rules under the microscope with enforcement gaps on full display.
The DPDP Act 2023: A Complete Guide for Indian Businesses
Everything Indian businesses need to know about the Digital Personal Data Protection Act 2023 — consent, data principal rights, breach reporting, penalties, and how to become compliant before the 2025 Rules deadline.
7 Steps to DPDP-Compliant Consent Management
A practical, step-by-step playbook for building a consent management system that satisfies the DPDP Act 2023 — from itemised consent capture to withdrawal flows and audit-ready artefacts.
No posts found for this tag.