India: Cybersecurity

Getting a SEBI registration is a milestone for any Alternative Investment Fund (“AIF”). It is also where the real compliance work begins. Once the fund becomes operational, the regulatory focus shifts to how its obligations are implemented in practice. The SEBI (Alternative Investment Funds) Regulations, 2012 (“AIF Regulations”) require detailed policies and procedures to govern fund decisions.

In this ‘Leading Questions’ section, Sidhant Dhingra and Shikher Upadhyay explain DPDP execution by outlining Data Fiduciary responsibilities, Significant Data Fiduciary duties, strict protections for children’s data, and rules for data erasure and retention.

The updates examine the Supreme Court’s approach to environmental restrictions in the Taj Trapezium Zone, the continued responsibility of developers to honour contractual possession commitments despite regulatory extensions, the availability of specific performance where contracts provide for a refund, and the evolving insolvency jurisprudence strengthening protections available to homebuyers.

As the curtain falls on 2025, the corporate world is fastened in an unrelenting race to weave Artificial Intelligence (AI) into every layer of commerce. Yet, much like the tale of Icarus, the pursuit of innovation raises a pressing question: has the thirst for technological ascendancy led companies to soar too close to the sun, neglecting the shield of cyber resilience?

GPS spoofing poses a sophisticated threat to Indian civil aviation, manipulating navigation systems through fake satellite signals that can mislead aircraft off course. As incidents increase near...

Cloud ERP is becoming central to how Gulf businesses manage finance, HR, and other core functions. For CFOs and CIOs, choosing an ERP now involves looking beyond features to assess how the system will handle sensitive financial and employee data, meet local requirements, and fit the broader security needs of the business.

On 26 April 2026, the Indian Computer Emergency Response Team (CERT-In) issued an advisory titled, “Defending Against Frontier AI Driven Cyber Risks” (Advisory), categorised as high severity. While framed as an advisory, it reflects a clear regulatory shift. Artificial Intelligence (AI) incident preparedness is no longer a matter of best practice, it is increasingly a baseline compliance expectation against which organisational readiness may be assessed.

The rapid proliferation of advanced artificial intelligence tools capable of autonomously identifying and potentially exploiting cybersecurity vulnerabilities has compelled India’s financial regulators and market...

India's new online gaming framework introduces a game-by-game regulatory approach that requires each operator to independently register their titles with the Online Gaming Authority, even when offering identical gameplay. The rules establish broad discretionary powers for determining what constitutes prohibited real-money gaming versus permissible e-sports, while delegating substantial operational oversight to executive advisories that can reshape compliance obligations with minimal notice.