India: Privacy Protection

Subscribe
Privacy law and privacy regulation thought leadership, articles, podcasts, videos and webinars from expert sources across the legal world. Explore insights covering topics including GDPR, data protection, data privacy, and privacy protection.
Article
Cancel Culture vs Due Process
In the contemporary digital age, the phenomenon of "trial by media" represents a significant challenge to the constitutional right to a fair trial. Media trials are defined as "certain regional or national new 'events' in which the criminal justice system is co-opted by media as a source of high drama entertainment". This concept refers to the influence of television, newspaper, and social media coverage on an individual's reputation, effectively shaping public perception of guilt or innocence before or after a judicial verdict.
India Media & IT
ML
MZM Legal
Article
Data Processing Agreements: Why They Matter For Businesses
Businesses increasingly rely on external service providers to store, analyse and manage personal information, making data processing agreements essential for modern privacy governance. Under India's Digital Personal Data Protection Act, 2023, these contracts define how service providers may handle personal data and establish responsibilities around security, confidentiality, incidents, sub-processors and deletion.
India Privacy
MH
Mansukhlal Hiralal & Co.
Article
DPDP Act Compliance For Startups And MSMEs: A Minimum Viable Data Protection Framework
The Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) were notified on 13 November 2025, more than two years after the Digital Personal Data Protection Act, 2023 (“DPDP Act” or “Act”) received Presidential assent. The Government has adopted a phased implementation approach, with most of the substantive obligations under the Act and Rules becoming operative 18 months from the date of notification, i.e., on 13 May 2027.
India Privacy
KS
King, Stubb & Kasiva
Article
How To Build A Privacy Compliance Framework For Your Organisation
A strong privacy compliance framework gives an organisation a structured way to manage personal data from collection to deletion. It connects legal requirements with everyday business processes, technology, contracts and employee responsibilities. For Indian organisations, this has become increasingly important following the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
India Privacy
MH
Mansukhlal Hiralal & Co.
Article
A Practical Data Protection Compliance Checklist For Indian Companies
Data protection is no longer only an IT issue. For Indian companies, it is becoming a core legal, governance and operational responsibility. A practical privacy compliance checklist helps businesses identify what personal data they collect, why they process it, who can access it, how it is protected and when it should be deleted. It also helps management identify gaps before they become regulatory, contractual or reputational problems.
India Privacy
MH
Mansukhlal Hiralal & Co.
Article
From Consent To Accountability: Japan’s 2026 APPI Amendment Bill And The New Data Strategy For AI-Driven Businesses
AI regulation does not always arrive in the form of a dedicated AI statute. More often, it enters through privacy law. On April 7, 2026, the Japanese Cabinet approved a bill to amend Japan’s Act on the Protection of Personal Information (“APPI”). The Diet passed the amendment on July 10, 2026, and it was promulgated on July 17, 2026 as Act No. 56 of 2026; the amendment is now enacted but not yet in force, with its main provisions taking effect on a date to be fixed by Cabinet order no later than mid-2028.
India Privacy
HS
Hammurabi & Solomon
Article
Data Privacy Compliance For Apps And Websites Used By Children In India
India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 introduce specific safeguards for children's personal data, including verifiable parental consent and restrictions on tracking, behavioural monitoring and targeted advertising. For businesses operating mobile applications and websites used by children, privacy compliance cannot be reduced to a privacy policy or consent button—it requires understanding what data is collected, how child users are iden
India Privacy
MH
Mansukhlal Hiralal & Co.
Article
Dignity In The Digital Age: Delhi High Court Reiterates The Right To Be Forgotten
On May 29, 2026, the Delhi High Court delivered a landmark judgment in a batch of petitions that raised the same question, that stood at the intersection of constitutional law and the digital age viz. whether an individual whose name appears in judicial records that are accessible through internet search engines is entitled, by virtue of the right to informational privacy guaranteed under Article 21 of the Constitution, to seek de-indexing of those records from name-based search results and masking of personal identifiers (including names) from publicly accessible digital versions of those records.
India Privacy
SR
S.S. Rana & Co. Advocates
See more