India: Data Protection

Subscribe
Privacy law and privacy regulation thought leadership, articles, podcasts, videos and webinars from expert sources across the legal world. Explore insights covering topics including GDPR, data protection, data privacy, and privacy protection.
Article
How Data Protection Lawyers Help Businesses Reduce Legal Risks
Data protection lawyers for businesses help organisations understand privacy laws, manage personal information responsibly and reduce the legal risks associated with collecting, storing, using and sharing data. As companies increasingly rely on digital platforms, customer databases, cloud services and third party providers, data protection has become an essential part of business governance. A privacy issue can lead to regulatory scrutiny, contractual disputes, financial losses and damage to customer trust.
India Privacy
MH
Mansukhlal Hiralal & Co.
Article
Website Data Collection: Legal Compliance For Cookies And Tracking Technologies
Modern websites collect far more information than many businesses realise. A visitor may generate data through cookies, analytics scripts, advertising pixels, session replay tools, device identifiers, contact forms, chat widgets and other tracking technologies. For businesses operating in India, website data collection compliance therefore involves more than publishing a privacy policy. Organisations need to understand what information their website collects, why it is collected, where it goes, who receives it and what legal framework applies.
India Privacy
MH
Mansukhlal Hiralal & Co.
Article
TRAI Tightens The Screws On Spam: New Rules Target Robocalls, Rogue Senders And Weak Enforcement
The Telecom Regulatory Authority of India has published the Telecom Commercial Communications Customer Preference (Third Amendment) Regulations, 2026 in the Gazette of India. The amendment brings tougher rules, a revised tariff and more advanced monitoring to curb unsolicited commercial communications, including spam calls, robocalls and unauthorized messaging across Indian telecom networks.
India Media & IT
IL
IndiaLaw LLP
Article
AI, Machine Learning And Data Protection Laws: What Businesses Need To Know
Artificial intelligence and machine learning systems depend heavily on data, raising important questions about privacy compliance. Businesses must navigate the Digital Personal Data Protection Act, 2023 alongside information technology laws, contractual obligations, and sector-specific regulations when deploying AI systems that collect, analyze, or generate information relating to identifiable individuals.
India Privacy
MH
Mansukhlal Hiralal & Co.
Article
Protected, Not Liable: The DPDP Act Does Not Make Directors Personally Liable For A Data Breach
When a company suffers a data breach, boardrooms instinctively fear the worst: that directors will be personally held responsible. This concern significantly overstates what the law actually provides. A careful reading of the relevant legislation reveals a framework that is considerably more protective of directors than the alarm around data breaches would suggest. Both Indian and European law draw a clear distinction between the company as the institution bearing primary liability, and the individuals who govern it, and that distinction is not easily collapsed.
India Privacy
HA
HSA Advocates
Article
Data Protection Laws For Healthcare Companies And Hospitals
Healthcare organisations in India handle highly sensitive patient information, from medical histories to genetic data. With the Digital Personal Data Protection Act, 2023 and new DPDP Rules, 2025 creating a modern statutory framework, hospitals and healthcare companies must navigate complex requirements around lawful data collection, secure storage, patient rights, vendor governance, and incident response while balancing clinical operations with evolving privacy obligations.
India Privacy
MH
Mansukhlal Hiralal & Co.
Article
India’s DPDP Consent Management Architecture Form November 2026
India’s data protection framework has continued to evolve since the enactment of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the subsequent introduction of the Digital Personal Data Protection Rules (the “Rules”) (together, the “DPDP regime”). The broader framework, including the applicability and commencement timeline, processing of personal data based on consent, recognition of consent managers and obligations of data fiduciaries, has already been discussed in our earlier article.
India Privacy
C
Clasis Law
Article
Data Processing Agreements: Why They Matter For Businesses
Businesses increasingly rely on external service providers to store, analyse and manage personal information, making data processing agreements essential for modern privacy governance. Under India's Digital Personal Data Protection Act, 2023, these contracts define how service providers may handle personal data and establish responsibilities around security, confidentiality, incidents, sub-processors and deletion.
India Privacy
MH
Mansukhlal Hiralal & Co.
Article
DPDP Act Compliance For Startups And MSMEs: A Minimum Viable Data Protection Framework
The Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) were notified on 13 November 2025, more than two years after the Digital Personal Data Protection Act, 2023 (“DPDP Act” or “Act”) received Presidential assent. The Government has adopted a phased implementation approach, with most of the substantive obligations under the Act and Rules becoming operative 18 months from the date of notification, i.e., on 13 May 2027.
India Privacy
KS
King, Stubb & Kasiva
Article
Rethinking E-Commerce Compliance: Key Changes Under The Consumer Protection (E-Commerce) (Amendment) Rules, 2026
On September 9, 2026, the Ministry of Consumer Affairs, Food and Public Distribution (Department of Consumer Affairs) notified the Consumer Protection (E-Commerce) (Amendment) Rules, 2026 (“Amendment Rules”), amending the Consumer Protection (E-Commerce) Rules, 2020 (“E-Commerce Rules”). The Amendment Rules will come into force on January 1, 2027.
India Consumer
AP
AZB & Partners
See more