Data Privacy and Protection

On June 16, 2025, the Telecom Regulatory Authority of India ("TRAI") launched a pilot project aimed at operationalising a new framework for digital consent management....

Who bears the burden of translating foreign prior art? Unpack the debate on navigating global innovation, following a recent decision of the Calcutta High Court....

The coming into force of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), with its myriad compliances, has had widespread implications for companies – more so, for B2C companies. In this age of digital advantages, B2C companies have been making the most of the benefits of the digital age that are available to them – whether it is by way of marketing to attract new customers or taking steps to retain existing ones. ......

Pursuant to the enactment of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the personal data of a 'Data Principal' can be processed only in accordance with the DPDP Act and for a lawful purpose for which the Data Principal has given consent. This consent needs to be 'free, specific, informed, unconditional and unambiguous' with a clear affirmative action. ......

In August 2023, India witnessed a pivotal shift in its data privacy regulatory landscape with the enactment of the Digital Personal Data Protection Act, 2023 ("DPDP Act"). The DPDP Act provides a comprehensive set of guidelines that must be adhered to when managing digital personal data, ensuring the protection of individuals' privacy rights while balancing legitimate business needs and government requirements. ......

The Ministry of Electronics and Information Technology (Meity) released the Draft Digital Personal Data Protection Rules, 2025 ("Draft Rules") on January 3, 2025. The Draft Rules, introduced to supplement the implementation of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), mark a significant step forward in regulating and safeguarding the use of personal data. ......

On January 3, 2025, the Ministry of Electronics and Information Technology ("MeitY") notified the draft Digital Personal Data Protection Rules, 2025 (the "Draft Rules") under the Digital Personal Data Protection Act, 2023 (the "Act"). The Draft Rules aim to operationalize the Act by laying down the rules and standards necessary for the implementation of the same. ......

The Department of Telecommunications ("DOT") has notified the Telecommunications (Procedures and Safeguards for Lawful Interception of Messages) Rules 2024 ("Interception Rules") vide its notification dated December 6, 2024, replacing the extant Indian Telegraph Rules 1951. ......

On October 8, 2024, through a consultation paper released by the Securities and Exchange Board of India ("SEBI") a new policy has been proposed on data-sharing for the purposes of research and analysis ("Policy"). The Policy is applicable to all intermediaries and Market Infrastructure Institutions ("MIIs") and is aimed at streamlining business operations in India's financial markets while addressing critical data privacy challenges. . . . ...