Data Privacy and Protection

The Digital Personal Data Protection Act, 2023 ("DPDP Act") introduces 'legitimate uses' as a lawful basis for processing personal data without consent....

In an era defined by digital connectivity and interactions driven by the continuous exchange of data, modern communication has become increasingly susceptible to external surveillance. ......

Data protection has historically been considered a compliance issue during transactions, which is generally identified during diligence and only tackled after closing ......

Artificial intelligence ("AI") is no longer at the margins of business strategy. For many organisations, it has become embedded in product design, customer engagement, internal workflows and long-term planning......

The Ministry of Electronics and Information Technology ("MeitY") recently notified the Digital Personal Data Protection Rules, 2025, on November 14, 2025. This notification brings into force the Digital Personal......

The Ministry of Information and Technology (“MeitY”) on Thursday, November 13, 2025 notified the Digital Personal Data Protection Rules, 2025 (the “DPDP Rules”), framed under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”)....

As organisations grapple with increasingly stringent privacy and data protection laws, the concept of the Data Clean Room (“DCR“) has emerged as a transformative solution that enables collaboration without compromising compliance....

The protection of children's personal data has and continues to present regulatory and practical challenges for lawmakers, businesses, organisations, institutions and establishments that deal with personal data ("Data Fiduciary")....

The governance of public sector data has long presented a regulatory dilemma: how to reconcile individual privacy with the broader societal value of data driven research and innovation....