India: Data Protection

Imagine a world where your favourite actor's "Jhakaas" catchphrase is convincingly mimicked in a video, not by a skilled impressionist, but by a soulless algorithm.

Implementing AI in an enterprise is as much a legal and governance challenge as it is a technical one. Lakshmikumaran & Sridharan (LKS)...

The Digital Personal Data Protection Act, 2023 ("DPDPA" or the "Act") is a landmark legislation enacted to safeguard the personal and sensitive data of individuals in India.

In the swiftly advancing digital economy, Software-as-a-Service (SaaS) platforms have become essential for enterprises of all dimensions.

The healthcare system in India is going through a digital transformation. Hospitals are using digital platforms more frequently to provide efficient and individualized care.

The use of biometric data has become ubiquitous in the recent past. From employee monitoring and fingerprint-based access at workplaces to identity verification (including through platforms such as DigiYatra and Aadhaar), biometric authentication is being employed for a variety of use cases in both the public and private sectors

The introduction of the Digital Personal Data Protection Act, 2023 ("DPDPA") marked a long-awaited step in the privacy journey of India, moving the focus from merely granting rights and obligations on paper towards the real challenge of implementing these standards in practice.

The copyright infringement lawsuit filed by ANI Media against OpenAI in the Delhi High Court last November reignited discussions around the regulatory vacuum surrounding Generative AI in India.

The Ministry of Communications ("MoC"), through the Department of Telecommunications ("DoT"), has released the Draft Telecommunications (Telecom Cyber Security) Amendment Rules, 2025 ("Draft Rules") to strengthen India's cybersecurity in the telecom sector and improve the security of telecom networks.