Data Privacy and Protection

The governance of public sector data has long presented a regulatory dilemma: how to reconcile individual privacy with the broader societal value of data driven research and innovation....

On June 16, 2025, the Telecom Regulatory Authority of India ("TRAI") launched a pilot project aimed at operationalising a new framework for digital consent management....

Who bears the burden of translating foreign prior art? Unpack the debate on navigating global innovation, following a recent decision of the Calcutta High Court....

The coming into force of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), with its myriad compliances, has had widespread implications for companies – more so, for B2C companies. In this age of digital advantages, B2C companies have been making the most of the benefits of the digital age that are available to them – whether it is by way of marketing to attract new customers or taking steps to retain existing ones. ......

Pursuant to the enactment of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the personal data of a 'Data Principal' can be processed only in accordance with the DPDP Act and for a lawful purpose for which the Data Principal has given consent. This consent needs to be 'free, specific, informed, unconditional and unambiguous' with a clear affirmative action. ......

In August 2023, India witnessed a pivotal shift in its data privacy regulatory landscape with the enactment of the Digital Personal Data Protection Act, 2023 ("DPDP Act"). The DPDP Act provides a comprehensive set of guidelines that must be adhered to when managing digital personal data, ensuring the protection of individuals' privacy rights while balancing legitimate business needs and government requirements. ......

The Ministry of Electronics and Information Technology (Meity) released the Draft Digital Personal Data Protection Rules, 2025 ("Draft Rules") on January 3, 2025. The Draft Rules, introduced to supplement the implementation of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), mark a significant step forward in regulating and safeguarding the use of personal data. ......

On January 3, 2025, the Ministry of Electronics and Information Technology ("MeitY") notified the draft Digital Personal Data Protection Rules, 2025 (the "Draft Rules") under the Digital Personal Data Protection Act, 2023 (the "Act"). The Draft Rules aim to operationalize the Act by laying down the rules and standards necessary for the implementation of the same. ......

The Department of Telecommunications ("DOT") has notified the Telecommunications (Procedures and Safeguards for Lawful Interception of Messages) Rules 2024 ("Interception Rules") vide its notification dated December 6, 2024, replacing the extant Indian Telegraph Rules 1951. ......