Key design elements for data protection
8 years, 1 month ago

Key design elements for data protection

Live Mint  

The age of Big Data, the growing pervasiveness of Aadhaar, and the government’s exhortations to “go cashless” have led to a re-emergence of interest in privacy and data protection in India. Although the operation of many laws such as the Information Technology Act, Aadhaar Act, Right to Information Act, and various other delegated legislation have an impact on the privacy of individuals, there is no comprehensive law or policy on privacy or data protection in India. On retention, the laws should specify the manner and form of preserving data, the time limits for such retention, and whether they recognize the “right to be forgotten”. Further, India can learn from European Union initiatives on data protection “by design” and “by default”, which focus on improving default privacy settings so as to reduce subsequent regulatory intervention.

Law India Privacy Data Protection Data Information Aadhaar Right Act Users Laws  right  users  elements  laws  information  india  act  design  law  protection  privacy  aadhaar  data  key

History of this topic

The challenge of policing digital giants
6 days, 5 hours ago

The challenge of policing digital giants

The Hindu  

On November 18, 2024, the Competition Commission of India issued a landmark order imposing a fine of ₹213.14 crore and forcing several behavioural remedies on Meta. This update required users to mandatorily consent to expanded data-sharing, allowing Meta to provide access to such data to all of its other platforms; forcing users to accept a data-sharing agreement on a “take-it-or-leave-it” …

Meta vs CCI: Will upcoming data protection rules impact the case? NCLAT to decide in May
1 week, 2 days ago

Meta vs CCI: Will upcoming data protection rules impact the case? NCLAT to decide in May

Live Mint  

The National Company Law Appellate Tribunal will decide on May 13 whether to hear an appeal by Meta Platforms against the Competition Commission of India’s ban on its messaging platform WhatsApp’s data-sharing practices before or after new digital personal data protection rules are enforced. A bench led by appellate tribunal chairperson Justice Ashok Bhushan said Monday it will examine whether …

Any Vulnerability In Aadhaar Database Can Lead To Misuse Of Personal & Financial Info, Strengthening Security Framework Need Of Hour: Orissa HC
1 month ago

Any Vulnerability In Aadhaar Database Can Lead To Misuse Of Personal & Financial Info, Strengthening Security Framework Need Of Hour: Orissa HC

Live Law  

The Orissa High Court has flagged the issue of misuse of Aadhaar details due to inadequate cybersecurity measures and has called for strengthening its security framework by implementing state-of-the-art encryption, multi-layered authentication protocols and stringent access controls. The Single Bench of Dr. Justice Sanjeeb Kumar Panigrahi made the observations while hearing a challenge made by Ex-Member of Parliament Tathagata Satapathy …

Data protection rules and Act, a net negative for privacy rights
1 month, 2 weeks ago

Data protection rules and Act, a net negative for privacy rights

The Hindu  

Around eight years since the judgment of the Supreme Court of India, in Justice K.S. Despite the Digital Personal Data Protection Act having been notified in August 2023, its provisions remain inoperative due to the delay in the notification of the Digital Personal Data Protection Rules Rules. ‘Significant Data Fiduciaries’, which are entities classified as such due to the volume …

New Digital Rules Let You Wipe All Your Details Online
1 month, 3 weeks ago

New Digital Rules Let You Wipe All Your Details Online

Deccan Chronicle  

Hyderabad: Can a customer walk into a multinational company like Amazon and ask it to remove all her information from the company's database? With the draft Digital Personal Data Protection Rules, 2025 released in public domain seeking comments and feedback, the citizens can now look forward to a framework through which they can exercise their right to privacy. The rules …

Bill to take charge of India’s digital destiny
2 months, 1 week ago

Bill to take charge of India’s digital destiny

Hindustan Times  

You wake up, pour yourself a coffee, and scroll through your phone. But what if every app and website you’ve ever used — Instagram, Amazon, or even that odd e-store — was quietly rifling through your personal data without asking you? India’s proposed Digital Personal Data Protection Rules, 2025 aim to ensure this nightmare doesn’t become your daily reality. Localisation …

How the draft rules for implementing data protection falls short
2 months, 1 week ago

How the draft rules for implementing data protection falls short

The Hindu  

After a long wait of 16 months, the Ministry of Electronics and Information Technology has released the draft rules for implementing the Digital Personal Data Protection Act, 2023. Lack of detail The draft rules propose operative guidance for critical mechanisms such as notice and consent to a user for data collection and processing, intimation of data breaches, collection of parental …

New US travel rules in 2025: Stricter ID requirements take effect
2 months, 2 weeks ago

New US travel rules in 2025: Stricter ID requirements take effect

India Today  

As 2025 begins, a wave of significant new laws is poised to reshape various aspects of life across the United States. These laws cover a wide range of issues, including advancements in artificial intelligence, updates to college admissions processes, healthcare policies for transgender youth, and stricter measures to protect personal data, such as revised ID regulations. ENHANCED DATA PRIVACY PROTECTIONS …

India’s data protection rules need some fine-tuning
2 months, 2 weeks ago

India’s data protection rules need some fine-tuning

The Hindu  

On January 3, 2025, the Ministry of Electronics and Information Technology released the much-anticipated Draft Digital Personal Data Protection Rules — a key moment in India’s journey to regulate digital personal data. The draft rules represent a departure from the earlier and controversial Personal Data Protection Bill, which many deemed was overly restrictive and even hostile to industry interests. While …

Digital Personal Data Protection Draft Rules: What Are the Sticking Points?
2 months, 2 weeks ago

Digital Personal Data Protection Draft Rules: What Are the Sticking Points?

The Quint  

In 2023, the Digital Personal Data Protection Act was passed by the Parliament. The Act passed after questions were raised with regard to the protection of data and its regulation within the Indian territory and the Act was passed to safeguard the private sphere of the citizens and to push through the idea of ‘digital economy’. In response to the …

Rollout of Data Rules set for mid-2025: IT Minister
Trending News
2 months, 2 weeks ago

Rollout of Data Rules set for mid-2025: IT Minister

The Hindu  

The government is aiming to notify and begin implementing the Digital Personal Data Protection Rules, 2025 — currently in a draft state — by the middle of this year, Union Minister of Electronics and Information Technology Ashwini Vaishnaw said. “I don’t see too many amendments coming in the final notification beyond some tweaks.” While large firms are prepared to comply …

Well-equipped data protection board a must to enforce digital privacy laws, say experts
Top News
2 months, 2 weeks ago

Well-equipped data protection board a must to enforce digital privacy laws, say experts

Live Mint  

New Delhi: The draft rules for the Digital Personal Data Protection Act, published on Friday, have ignited discussions among legal and data privacy experts regarding the effective implementation of the law. “Provisions for criminal liability in cases of severe data breaches could go a long way in ensuring stricter compliance," said Nazneen Ichhaporia, partner at ANB Legal. On 3 January, …

Mint Explainer: The digital personal data protection Act, its rules, and roadblocks
Trending News
2 months, 2 weeks ago

Mint Explainer: The digital personal data protection Act, its rules, and roadblocks

Live Mint  

Companies waited nearly two years for the Indian government to frame rules for implementing the Digital Personal Data Protection Act—a threadbare legislation with a lot of queries on compliance mechanisms left unanswered. Concern: In emphasizing the “specified" purpose of the data, the legislators have created an overlap with the provisions of “Legitimate Use" under the DPDP Act, which allows data …

Mint Explainer: The digital personal data protection Act, its rules, and roadblocks
2 months, 2 weeks ago

Mint Explainer: The digital personal data protection Act, its rules, and roadblocks

Live Mint  

Companies waited nearly two years for the Indian government to frame rules for implementing the Digital Personal Data Protection Act—a threadbare legislation with a lot of queries on compliance mechanisms left unanswered. Concern: In emphasizing the “specified" purpose of the data, the legislators have created an overlap with the provisions of “Legitimate Use" under the DPDP Act, which allows data …

Mint Quick Edit | India’s new privacy rules: A mixed bag
2 months, 2 weeks ago

Mint Quick Edit | India’s new privacy rules: A mixed bag

Live Mint  

More than a year after the Digital Personal Data Protection Act was passed, the government has released the draft rules that will enable this law’s implementation. While the rules are expansive, their requirement of parental consent for under-18-year-olds to join social media and gaming platforms could deliver a pragmatic age-gating regime. That said, the return of data localization requirements will …

No secret affair: on the draft Digital Personal Data Protection Rules, 2025
2 months, 3 weeks ago

No secret affair: on the draft Digital Personal Data Protection Rules, 2025

The Hindu  

The draft Digital Personal Data Protection Rules, 2025, is a long overdue advance in the direction of enforcing the fundamental right to informational privacy for Indians, affirmed by the Supreme Court of India in the landmark case, Justice K.S. The Digital Personal Data Protection Act, which these draft rules seek to enforce, was passed in Parliament over a year ago. …

India’s Digital Data Protection rules: A story of hits and misses
2 months, 3 weeks ago

India’s Digital Data Protection rules: A story of hits and misses

Live Mint  

The draft Digital Personal Data Protection Rules are finally with us and the long wait has for the most part been worth it. While the Act requires data fiduciaries to provide notice “in the event of" a personal breach, the rules state that intimation must be made “as soon as the Data Fiduciary becomes aware of it." Ever since Justice …

Parental nod, ID proof: How Modi govt plans to regulate digital access for minors
Top News
2 months, 3 weeks ago

Parental nod, ID proof: How Modi govt plans to regulate digital access for minors

India Today  

The Union government, at the beginning of the new year, unveiled a long-anticipated blueprint for India’s digital future: the draft Digital Personal Data Protection Rules, 2025. Social media platforms, gaming apps and e-commerce websites—all categorised as “data fiduciaries”—are now tasked with obtaining explicit, verifiable consent from users before collecting, processing or storing personal data. When the users in question are …

Data protection rules: India Inc says challenges remain
2 months, 3 weeks ago

Data protection rules: India Inc says challenges remain

New Indian Express  

NEW DELHI: The Ministry of Electronics and Information Technology has released the much-awaited draft rules for the Digital Personal Data Protection Act, 2025. Continued engagement from the government will be key to ensuring effective implementation.” Goldie Dhama, Partner at Deloitte India, said the draft offers important clarifications, mainly regarding verifiable consent for children’s data. After a gap of over 16 …

Digital Personal Data Protection Rules: Govt drafts stringent parental consent rules for social media users under 18
2 months, 3 weeks ago

Digital Personal Data Protection Rules: Govt drafts stringent parental consent rules for social media users under 18

Op India  

On 3rd December, the Government of India proposed detailed rules under the Digital Personal Data Protection Rules, 2025. One of the most talked-about aspects of the draft is the rule that makes verifiable parental consent mandatory for creating social media accounts and processing the personal data of children. As per the draft rules, every organisation that collects personal data must …

The legal gaps in India’s unregulated AI surveillance
3 months, 1 week ago

The legal gaps in India’s unregulated AI surveillance

The Hindu  

In 2019, the Indian government made headlines by announcing its intention to create the world’s largest facial recognition system for policing. The use of AI for surveillance has global parallels, often resulting in “dragnet surveillance”, a term that refers to indiscriminate data collection beyond just suspects or criminals. This article explores the legal frameworks, gaps, and concerns surrounding AI surveillance …

Anonymized medical data should be given an additional privacy shield
3 months, 1 week ago

Anonymized medical data should be given an additional privacy shield

Live Mint  

When I first saw the original blueprint of the Ayushman Bharat Digital Health Mission, the feature that really jumped out at me was its anonymizer module. This was the first time that a digital building block designed to de-identify personal data was being built directly into the digital workflow and I was excited by the possibilities that this offered. But, …

Privacy as priority: India can’t afford any further delay in notifying data protection rules
3 months, 1 week ago

Privacy as priority: India can’t afford any further delay in notifying data protection rules

Live Mint  

A few days ago, Signzy, a popular Know Your Customer verification service used by India’s top banks and fintech firms, was affected by a cyber attack that may have exposed the sensitive personal information of millions. India’s Digital Personal Data Protection Act was passed six years after the Right to Privacy verdict in 2017. The Digital India Act, touted as …

India to introduce new legal framework for data privacy, free data flow: Piyush Goyal
4 months ago

India to introduce new legal framework for data privacy, free data flow: Piyush Goyal

Live Mint  

New Delhi, Novemeber 22 : Union Minister Piyush Goyal announced that India is set to bring in a new legal framework to ensure data privacy while promoting the free flow of data among trusted global partners. The minister stated this during his address at the UK India Business Council's 'UK-India Technology Futures Conference' held in New Delhi on Thursday. In …

Let’s plug a privacy loophole in India’s account aggregator system
4 months, 1 week ago

Let’s plug a privacy loophole in India’s account aggregator system

Live Mint  

As regular readers of this column will know by now, I have long advocated the benefits of embedding regulatory principles directly into digital infrastructure. India’s Account Aggregator system has been built around a technology construct—referred to as the ‘consent artefact’—that embodies these privacy principles in a digital format. Since the principles of notice, purpose specification, retention restrictions and data minimization …

EU's data privacy laws stymie India's investigation into airline bomb hoax calls
4 months, 1 week ago

EU's data privacy laws stymie India's investigation into airline bomb hoax calls

Live Mint  

New Delhi: India’s hunt for the perpetrators of multiple bombing threats that significantly disrupted the domestic aviation and hospitality sectors has hit a roadblock in Europe, where most of the hoax calls are said to have been made through virtual private networks. “India has currently hit a roadblock in the European Union, with France and Germany being among the nations …

New data law, a barrier to journalistic free speech
11 months, 1 week ago

New data law, a barrier to journalistic free speech

The Hindu  

In August 2023, India got its first comprehensive data protection law, the Digital Personal Data Protection Act, 2023. Three previous drafts of the DPDP Act had exemptions for journalistic activities, but the final law withdrew such an exemption. Three previous drafts of the DPDP Act, one released by an expert committee on data protection, the other by the government, and …

Corporate boards should foster a culture of data privacy in organizations
1 year ago

Corporate boards should foster a culture of data privacy in organizations

Live Mint  

The digital age has ushered in a new era of responsibility—to safeguard the core of our online existence: our data. In acknowledging the role of data privacy being integral to corporate governance and risk management, the board has a crucial role in not only ensuring that the enterprise meets legal obligations, but also establishing a bedrock of trust under its …

Alert first, act fast: Diktat on data breaches soon
1 year, 2 months ago

Alert first, act fast: Diktat on data breaches soon

Live Mint  

Organizations that notice breaches of personal data may have to immediately alert users and flag them to the Data Protection Board, followed by a detailed filing within 72 hours. The Digital Personal Data Protection Act, India’s first law on data protection, took effect in August, and upcoming rules under the Act will lay the ground for compliance by technology companies. …

India's Data Revolution: Unpacking the DPDPA 2023 and Ensuring Accountability
1 year, 4 months ago

India's Data Revolution: Unpacking the DPDPA 2023 and Ensuring Accountability

The Quint  

It is crucial to establish mechanisms that hold the government accountable as a data custodian, said Dr Kislay Pandey, a leading corporate lawyer of India. Specific measures need to be taken to explicitly regulate emerging technologies like AI and tapping into their potential to bolster data protection. He further said, “To ensure the efficacy of data protection and privacy regulation …

The Art of A Good Unicorn | Startup founders, be careful as data is more liability than asset now
1 year, 4 months ago

The Art of A Good Unicorn | Startup founders, be careful as data is more liability than asset now

Hindustan Times  

India has become a rapidly evolving digital landscape where technology reigns supreme. And therein lies the rub: The need for accountability and data protection brewing in Internet startups handling data in India’s burgeoning startup ecosystem. And so, in August 2023, India’s Rajya Sabha passed the Digital Personal Data Protection Act 2023 to redefine how digital personal data is processed. Or …

Only 9% of Indian organizations secure explicit user data consent: Report reveals
1 year, 5 months ago

Only 9% of Indian organizations secure explicit user data consent: Report reveals

India TV News  

Only 9% of Indian organizations secure explicit user data consent: Report reveals PwC India conducted a thorough examination of the websites belonging to 100 Indian enterprises in order to gauge their adherence to the DPDP Act. A recent report has shed light on significant compliance gaps in data consent practices among Indian organizations as the government collaborates with industry stakeholders …

Data protection rules to come out over next thirty days, say MoS IT Rajeev Chandrasekhar
1 year, 6 months ago

Data protection rules to come out over next thirty days, say MoS IT Rajeev Chandrasekhar

The Hindu  

Rules for the Digital Personal Data Protection Act, 2023 will come out in the coming month, Minister of State for Electronics and Information Technology Rajeev Chandrasekhar said on Wednesday. Mr. Chandrasekhar was speaking at a “Digital India Dialogues” event, where industry representatives from firms that will have to comply with the requirements of the DPDP Act were present. “We will …

E- International Seminar, Right To Privacy, Data Protection, Law Mantra Trust, MNLU Nagpur, NLSIU Bangalore
1 year, 6 months ago

E- International Seminar, Right To Privacy, Data Protection, Law Mantra Trust, MNLU Nagpur, NLSIU Bangalore

Live Law  

The Seminar aims to examine and analyze Right to Privacy & Data Protection in Digital Era in today’s times. The International Seminar will be attended by various international delegates and speakers as also representatives from the national Diaspora representing the stakeholders in the digital ecosystem and alive web. These would include representatives from the Central Government & State Governments, various …

Navigating the complex landscape of data privacy laws in India
1 year, 6 months ago

Navigating the complex landscape of data privacy laws in India

Hindustan Times  

In an era where data is hailed as the "new oil," the need for strong data privacy laws has never been more critical. India, too, has stepped up its game in this regard with the introduction of the Digital Personal Data Protection Act, 2023. Compliance with data protection laws, such as the Digital Personal Data Protection Act, 2023 in India, …

Transfer of personal data under U.N. treaty will be according to native laws
1 year, 6 months ago

Transfer of personal data under U.N. treaty will be according to native laws

The Hindu  

As United Nations member states negotiate a treaty to counter cybercrimes, India has made suggestions at the international forum that transfer of “personal data” under the convention will be done in accordance with the country’s domestics laws and not other applicable international laws. The Digital Personal Data Protection Act enacted by the Parliament in August says that personal data can …

HNLU To Conduct A Round Table On Data Protection In A Digital World: Perspectives From India
1 year, 6 months ago

HNLU To Conduct A Round Table On Data Protection In A Digital World: Perspectives From India

Live Law  

Hidayatullah National Law University, a leading institution in the field of legal education, is proud to announce an upcoming round table discussion on the topic "Delineating the Issues Relating to Data Protection in a Digital World: Perspectives from India." It will be an exceptional opportunity to engage with experts and explore the intricacies of data protection in the digital age …

Bihar caste survey | No Supreme Court stay on publication of data
1 year, 7 months ago

Bihar caste survey | No Supreme Court stay on publication of data

The Hindu  

The Supreme Court on Friday refused to stay the uploading of data collected in the recently concluded Bihar caste-based survey while debunking claims that the Nitish Kumar government has violated the fundamental right to privacy by compelling people to reveal their caste. Vaidyanathan, who appeared for the NGO, Youth for Equality, against the survey, said that people could not be …

Digital Personal Data Protection Act Will Make Companies Handle Data Of Indians Under Legal Obligation: IT Minister
1 year, 7 months ago

Digital Personal Data Protection Act Will Make Companies Handle Data Of Indians Under Legal Obligation: IT Minister

ABP News  

Union Minister of State for Electronics and Information Technology Rajeev Chandrasekhar on Thursday said the Digital Personal Data Protection Act passed by Parliament recently will make digital companies handle the data of Indian citizens under absolute legal obligation. "The Digital Personal Data Protection Act that was passed by Parliament a few days ago is a very important milestone in the …

Personal Data Protection: How India's Law Looks Compared to EU's Regulations
1 year, 7 months ago

Personal Data Protection: How India's Law Looks Compared to EU's Regulations

The Quint  

DPDPA seeks “to provide for the processing of digital personal data in a manner that recognises both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes and for matters connected therewith or incidental thereto,” as mentioned at the beginning of the legislation. In August 2017, when the nine-judge bench …

Word choice in India’s data protection law and a dilution of rights
1 year, 7 months ago

Word choice in India’s data protection law and a dilution of rights

The Hindu  

After years of going back and forth on its contents, India finally has a data protection law, i.e., the Digital Personal Data Protection Act, 2023. In the search for an answer to this question, we need to look at two basic features of any data protection law: the use of personal data with consent and without it. As decades of …

India's DPDP Bill: Pioneering data privacy safeguarding with empowered individuals and responsible fiduciaries
1 year, 7 months ago

India's DPDP Bill: Pioneering data privacy safeguarding with empowered individuals and responsible fiduciaries

Firstpost  

The DPDP Bill signifies a pivotal shift in data processing practices, making it crucial for organisations to comprehend its provisions and ensure compliance The Digital Personal Data Protection Bill represents a significant step towards safeguarding data privacy in India. The DPDP Bill requires data fiduciaries to obtain consent from individuals before processing their personal data. The DPDP Bill also sets …

Explained: India's new Digital Personal Data Protection framework
1 year, 7 months ago

Explained: India's new Digital Personal Data Protection framework

Hindustan Times  

A new law that defines how companies should process users' data came into force with the President giving assent to the Digital Personal Data Protection Act passed by Parliament in the just-concluded monsoon session. Digital Personal Data Protection law has been notified by government. Entities must protect personal data in their possession by taking reasonable security safeguards to prevent a …

Paytm CEO says data protection bill ‘well articulated’, calls it ‘progress of our digital economy’
1 year, 7 months ago

Paytm CEO says data protection bill ‘well articulated’, calls it ‘progress of our digital economy’

Hindustan Times  

Paytm founder and CEO Vijay Shekhar Sharma on Friday took to X to praise the Digital Personal Data Protection Act, stating that it has been “well articulated” and that “it is progress for India's digital economy,” tagging Union minister Rajeev Chandrasekhar and the IT ministry. The Digital Personal Data Protection Bill, 2023, which curbs the misuse of personal information by …

President Gives Assent To Digital Personal Data Protection Act 2023
1 year, 7 months ago

President Gives Assent To Digital Personal Data Protection Act 2023

Live Law  

The President has given assent to the new the Digital Personal Data Protect, Act 2023 on Friday. The Bill seeks “to provide for the processing of digital personal data in a manner that recognises both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes.” It applies to the processing …

Satire India new Digital Personal Data Protection Bill, 2023 policy highlights
1 year, 7 months ago

Satire India new Digital Personal Data Protection Bill, 2023 policy highlights

The Hindu  

First of all, kudos to the Mother of Democracy for setting new world records every day for fastest-ever law-making. Did you know the Digital Personal Data Protection Bill, 2023 zipped through Parliament faster than a bullet train? There was no nonsense like ‘informed consent’ because they knew that all individual streams of data merge eventually with the Annadata — ‘the …

Legal framework for privacy as RS clears digital data bill
1 year, 7 months ago

Legal framework for privacy as RS clears digital data bill

Hindustan Times  

The Rajya Sabha passed the Digital Personal Data Protection Bill, 2023 on Wednesday, clearing the way for what will be the first legal framework for privacy, close to six years after it was held as a fundamental right for Indians by the Supreme Court. While it is unlikely to take long for the bill to receive presidential assent — at …

Data market’s future hinges on regulation
1 year, 7 months ago

Data market’s future hinges on regulation

Hindustan Times  

In 1776, when Adam Smith — arguably the most ardent champion of market economics — argued in favour of the invisible hand, there was no telephone, no broadband and no digital data coursing through cables or air waves. Several economists, including Hal Varian, the chief economist of Google, are swayed by the efficiency hypothesis while others liken data to oil …

India passes data protection legislation in Parliament. Critics fear privacy violation
1 year, 7 months ago

India passes data protection legislation in Parliament. Critics fear privacy violation

Associated Press  

NEW DELHI — Indian lawmakers Wednesday approved a data protection legislation that “seeks to better regulate big tech firms and penalize companies for data breaches” as several groups expressed concern over citizens’ privacy rights. The legislation will limit cross-border transfer of data and provide a framework for setting up a data protection authority to ensure compliance from tech companies, Information …

India passes data protection bill amid surveillance concerns
1 year, 7 months ago

India passes data protection bill amid surveillance concerns

Al Jazeera  

The new law has drawn criticism from opposition lawmakers and rights groups over the scope of exemptions, weakening gov’t accountability. Indian lawmakers have passed a data protection law that will dictate how tech companies process users’ data amid criticism that it will likely lead to increased surveillance by the government. The Digital Personal Data Protection Bill, 2023 gives the government …

Discover Related