India: Data Protection

The judgement provides jurisprudence on various aspects of data protection and competition law, that have not been considered by Courts in India before

In today's digital economy, data has emerged as a powerful economic asset, central to business growth, innovation, and competition...

In October 2025, a communication platform with over 200 million active users worldwide disclosed a significant data breach that originated not from its own systems, but from a compromised third-party customer service provider

The notification clarifies that the above-mentioned thresholds shall be computed basis the annual consolidated turnover of the listed entity as per the last audited financial statements of the listed entity.

India faces an escalating deepfake crisis. Malicious individuals have established illicit websites to misuse AI-altered voice technology for financial fraud and public figure impersonation.

On 3 November 2025, the Unique Identification Authority of India (UIDAI) updated its ‘Frequently Asked Questions (FAQs) on Aadhaar Data Vault (ADV) / Hardware Security Module (HSM)' (2025 FAQs), based on its revised ADV Circular dated 18 July 2025 (2025 Circular.

The Digital Personal Data Protection Act, 2023 ("Act") intends to balance the need to process personal data with the right of individuals to protect their personal data.

The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 reshape fundamental data processing practices as well as nuanced business operations.

On September 1, 2025, the Indian Computer Emergency Response Team (hereinafter referred to as ‘CERT-In') issued '15 Elemental Cyber Defense Controls for Micro, Small and Medium Enterprises (MSMEs)' (hereinafter referred to as ‘MSME Guidelines') vide Guidelines no. CISG-2024-03.