India: Privacy

India is on the verge of implementing the Digital Personal Data Protection Act, 2023 ("DPDPA"). To assist the industry with compliance, the Ministry of Electronics and Information Technology (MeitY"), is exploring a "law-to-code" framework that seeks to build compliance directly into technological infrastructure by converting law into machine-executable rules capable of being automatically implemented within digital systems.

The Delhi High Court has established India's first comprehensive legal framework for the right to be forgotten, addressing whether individuals can seek de-indexing of judicial records from search results and masking of personal identifiers from digital court records.

“Until the central government publishes the list of permitted and restricted countries under DPDP rules, cross-border data transfer obligations remain in a holding pattern. However, this is not a reason for inaction, it is a reason to audit and map all cross-border data flows now, so you are ready to assess compliance the moment the rules land”.