Data Privacy and Protection

The Digital Personal Data Protection Act, 2023 ("Act") establishes a comprehensive framework for the protection of personal data in commercial processing including through the requirement of consent, while preserving......

The voluntary provision of personal data through registration forms, account creation interfaces, and onboarding workflows occupies a difficult interpretive space under the Digital Personal Data Protection Act, 2023 (the "DPDP Act")....

The Digital Personal Data Protection Act, 2023 ("DPDP Act") introduces 'legitimate uses' as a lawful basis for processing personal data without consent....

In an era defined by digital connectivity and interactions driven by the continuous exchange of data, modern communication has become increasingly susceptible to external surveillance. ......

Data protection has historically been considered a compliance issue during transactions, which is generally identified during diligence and only tackled after closing ......

Artificial intelligence ("AI") is no longer at the margins of business strategy. For many organisations, it has become embedded in product design, customer engagement, internal workflows and long-term planning......

The Ministry of Electronics and Information Technology ("MeitY") recently notified the Digital Personal Data Protection Rules, 2025, on November 14, 2025. This notification brings into force the Digital Personal......

The Ministry of Information and Technology (“MeitY”) on Thursday, November 13, 2025 notified the Digital Personal Data Protection Rules, 2025 (the “DPDP Rules”), framed under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”)....

As organisations grapple with increasingly stringent privacy and data protection laws, the concept of the Data Clean Room (“DCR“) has emerged as a transformative solution that enables collaboration without compromising compliance....