The Supreme Court of India has agreed to examine petitions challenging the constitutional validity of the Digital Personal Data Protection (DPDP) Act, 2023, focusing on concerns about its impact on the Right to Information Act.
Digital Personal Data Protection (DPDP) law aims to protect the privacy of Indian citizens while proposing a penalty of up to Rs 250 crore on entities for misusing or failing to protect digital data of individuals.
A new law that defines how companies should process users' data came into force with the President giving assent to the Digital Personal Data Protection (DPDP) Act passed by Parliament in the just-concluded monsoon session. The law arms individuals with greater control over their data while allowing companies to transfer users' data abroad for processing, except to nations and territories restricted by the Centre through notification. It also gives the government power to seek information from firms and issue directions to block content.
The draft rules have been issued after Parliament approved the Digital Data Protection Bill 2023 about 14 months back.
The United States Trade Representative (USTR) has expressed concerns that India's Digital Personal Data Protection (DPDP) Act, particularly the lack of a deemed consent mechanism for credit information companies, and the Information Technology (IT) Rules of 2021, along with frequent internet shutdowns, could negatively impact the ability of US companies to operate and trade in India.
The "construct of the DPDP Act" cannot be changed at this stage, though there may be some minor tweaks in the language of the Rules and formats in certain legitimate cases.
BJP MP Raghav Chadha addressed the 12th IPU Global Conference of Young Parliamentarians in Samarkand, Uzbekistan, highlighting India's digital transformation journey. He emphasised how technology is widening access and promoting inclusion, citing UPI's success, affordable data, and robust data protection laws. Chadha also discussed India's digital cooperation with Uzbekistan and the importance of digital rights, safety, and skill development for all citizens.
The Supreme Court has made permanent its order protecting a journalist from coercive action in a road rage case and quashed a police notice to 'X' seeking his digital details. The court noted the police sought data from before the alleged crime and granted the journalist liberty to challenge the FIR and seek guidelines for data collection.
'One has to be very mindful because it will be applicable for big tech platforms and even for banks and insurers, whose business is completely different.'
Artificial intelligence major Anthropic has launched AI inference capabilities in India through Amazon Bedrock, allowing its Claude AI models to process data within the country's jurisdiction. This strategic move addresses the growing demand from Indian entities, particularly in regulated sectors, for compliance with local data processing norms as per the Digital Personal Data Protection Act. The initiative strengthens Anthropic's commitment to the Indian market, enabling secure and compliant AI deployment for sensitive workloads and fostering trust among major enterprises like Reliance, CRED, and NPCI.
Indian banks and non-banking financial companies (NBFCs) are undertaking a comprehensive review and reset of their engagement terms with fintech firms, driven by the Reserve Bank of India's (RBI) draft Guidance on Regulatory Expectations for Data Governance and the stringent compliance requirements of the Digital Personal Data Protection (DPDP) Act, 2023, and its 2025 Rules.
The data protection bill introduced in Parliament on Thursday enables the government "to call for information" from data protection board, data collecting entities or intermediary, and safeguards the Centre from legal proceedings for "action taken in good faith" under the provisions of the legislation.
Former Rajya Sabha member Saket Gokhale has alleged that the Election Commission refused to disclose details of Chief Election Commissioner Gyanesh Kumar's official visits and the expenditure incurred from public funds, citing 'personal information' under the Right to Information Act.
Entities may be given about a year to tune their systems to comply with norms of Digital Personal Data Protection Act, 2023, Minister of State for Electronics and IT Rajeev Chandrasekhar said on Wednesday. Speaking to reporters on the sidelines of consultation with the industry, Chandrasekhar said the Data Protection Board and guidelines for the eight rules, including consent management, will be put in place within a month. "Industry wants some more time for age-gating, different timelines for transition for different data fiduciaries.
A data breach does not end when the headlines fade. For victims, stolen personal information can fuel fraud, identity theft and financial losses for years.
WhatsApp is testing new ways for users in India to confirm their age as it prepares to comply with upcoming legal requirements, including those related to the Digital Personal Data Protection (DPDP) Act, the Meta-owned messaging platform said on Tuesday.
India needs a paradigm shift in personal data management that transforms the current organisation-centric data sharing system to an individual centric approach that promotes user control on data sharing for empowerment, said Niti.
The government on Thursday tabled the Digital Personal Data Protection Bill 2023 in the Lok Sabha with an aim to protect the privacy of Indian citizens, while proposing a penalty of up to Rs 250 crore on entities for misusing or failing to protect digital data of individuals.
The new rules allow for a staggered implementation road map, giving companies, data fiduciaries, data principals, and other stakeholders up to 18 months to comply with the administrative guidelines under the DPDP Act.
The Rajya Sabha on Wednesday passed the Digital Personal Data Protection Bill 2023 by voice vote following a walkout by opposition members over the Manipur issue.
A new report by ADP reveals that one in two Indian companies plan to adopt AI-powered payroll systems within the next 12 months, driven by the need for automation in workforce management, compliance, and compensation decisions. However, firms are increasingly cautious about data protection risks, especially with the implementation of the Digital Personal Data Protection (DPDP) Act, 2023.
The United States and the European Union have strongly criticised India's trade policies at the World Trade Organization review, highlighting concerns over high tariffs, quality-control orders (QCOs), and restrictions on digital trade and services, which they argue undermine India's economic openness.
The government on Wednesday withdrew the Personal Data Protection Bill from Lok Sabha and said it will come out with a 'set of fresh legislations' that will fit into the comprehensive legal framework.
Prime Minister Narendra Modi is promoting India as a global hub for digital infrastructure and artificial intelligence, highlighting the government's incentives for data center investments and inviting the world's data to reside in India.
The Supreme Court has directed the Centre to explore a statutory framework to ensure social media intermediaries comply with Indian laws regarding minors, particularly concerning their inability to independently enter into contracts. The court highlighted the need for safeguards to protect children from potential harms on digital platforms, including exploitation and misuse of data, and asked the Solicitor General to examine incorporating these requirements into intermediary rules.
Cybersecurity specialists warn AI-driven attacks require continuous threat monitoring instead of periodic security checks.
'There were two options before the government -- create a complex, cumbersome law, which will cause a tremendous amount of compliance challenges for startups or say let's go back and do a clean slate, where we do a framework of laws and policies'
After withdrawing the personal data protection bill, the government is hopeful of getting a new legislation passed by the next Budget session of Parliament, Union Minister Ashwini Vaishnaw has said.
Hours after Congress leader Manish Tewari on Thursday said the government might get the Digital Data Protection Bill classified as a money bill, Union IT Minister Ashwini Vaishnaw refuted the charge and termed it a "normal bill".
The government is introducing a 0.4% Merchant Discount Rate (MDR) on UPI person-to-merchant payments above Rs 2,000, effective October 15. This move ends the zero-MDR regime, aiming to fund UPI infrastructure and sustainability, as the previous government subsidy was insufficient to cover operational costs. Payments between individuals and most everyday merchant transactions will remain free.
DPDP Act (2023) gives individuals the right to decide how their personal data is collected and used. For many businesses, this means reworking longstanding data practices, notes Ravi Duvvuru.
Bank of Baroda has launched 'bob World 2.0', an AI-powered mobile banking app featuring voice-command capabilities for payments and navigation. The updated app also includes a personal finance management module and a persona-based customer experience, aiming to offer intuitive, secure, and personalised banking services.
After withdrawing the personal data protection bill, the government is hopeful of getting a new legislation passed by the next Budget session of Parliament, Union minister Ashwini Vaishnaw has said. The government on Wednesday withdrew the Personal Data Protection Bill from the Lok Sabha. The Joint Committee on Personal Data Protection Bill, 2019, headed by BJP member P P Chaudhary, had tabled its report in Lok Sabha on December 16, 2021.
'We are in touch with industry to further compress the timelines.'
The Supreme Court has sought responses from the Union ministries of electronics and information technology and law and justice regarding a plea for safeguards for minors on social media. The NGO 'Just Rights for Children Alliance' filed the plea, arguing that social media platforms should not enter into contracts with children under 18, citing their statutory incapacity to contract and the risks of online harm.
The report touches on variety of issues including consent, rights of children, data protection authority and right to recall data.
Cathy Li, Head of the Centre for AI Excellence at the World Economic Forum, advocates for integrating AI literacy into India's education curriculum and incentivising AI companies to prioritise child safety. She stresses the need for localised solutions that account for India's linguistic and cultural diversity, as well as varying levels of connectivity and digital literacy, to ensure AI systems are safe and beneficial for children.
An IIT Madras study reveals that financial cybercrime victims in India are often highly educated professionals, challenging the notion that only careless or financially unaware individuals are targeted. The research highlights that digital literacy doesn't guarantee protection, as fraudsters exploit stress and emotional vulnerabilities.
Since the deadline for Justice B N Srikrishna Committee's feedback is December 31, the government is unlikely to table a data protection Bill in the winter session of Parliament.
