INSIGHTS

Introduction and Legislative Background The data protection law of India has been in development for many years and is currently at a crucial point. The Digital Personal Data Protection Act 2023 (DPDP Act) is a major piece of legislation that establishes a comprehensive framework for the protection of personal data. Nevertheless, there have been delays in the establishment of the enforcement agency of the Act, namely, the Data Protection Board of India (DPBI). The DPDP Act go

Introduction Data has emerged as a new core asset with the enforcement of the Digital Personal Data Protection Rules, 2025 (operationalizing the Digital Personal Data Protection Act, 2023) and this has impacted India’s Corporate landscape as well. The DPDP Act, and its accompanying DPDP Rules, effective from January 3, 2025, establish a comprehensive framework for handling digital personal data. Though due diligence lacks statutory compulsion in mergers and acquisitions (M&A)

Introduction The Digital Personal Data Protection Act, 2023 (DPDP Act), [1] is a significant development in the Indian privacy regime. The DPDP Act cautions the rights of data principals (individuals) and obligations on data fiduciaries concerning consent, purpose restriction, data minimisation, and the right to correct/erase. Conversely, the Indian IP regime regarding copyrights, patents, trade secrets, database protection, and contract licenses treats information and creat

Introduction The foundation of AI systems is built on the data collected from various sources. The richness and size of datasets is usually correlated with the performance of AI models. Yet, the majority of the data used to develop these datasets contains Personally Identifiable Information (PII), including text, photos, videos, and digital media, and will likely be used in great amounts when developing AI systems. As a result, the Digital Personal Data Protection Act of 2023