India: Privacy Protection

Subscribe
Privacy law and privacy regulation thought leadership, articles, podcasts, videos and webinars from expert sources across the legal world. Explore insights covering topics including GDPR, data protection, data privacy, and privacy protection.
Article
Cancel Culture vs Due Process
In the contemporary digital age, the phenomenon of "trial by media" represents a significant challenge to the constitutional right to a fair trial. Media trials are defined as "certain regional or national new 'events' in which the criminal justice system is co-opted by media as a source of high drama entertainment". This concept refers to the influence of television, newspaper, and social media coverage on an individual's reputation, effectively shaping public perception of guilt or innocence before or after a judicial verdict.
India Media & IT
ML
MZM Legal
Article
The Legal Loophole And Marketing Miracle Behind A 250 Crore Blockbuster
Hanuman Ansh, produced for just 2 crore rupees, has now made over 250 crore. And there is a legal reason it could tell this story so cheaply. The first is a marketing miracle. The second is a quiet point of law. Let me take both. It is a devotional drama about Neem Karoli Baba, made by a first-time filmmaker, Vishal Chaturvedi, from his own book. It opened on August 7 to a day-one collection of just ten lakh. Almost nobody knew it existed.
India Media & IT
Foresight Law Offices
Article
DPDP Act Compliance For Startups And MSMEs: A Minimum Viable Data Protection Framework
The Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) were notified on 13 November 2025, more than two years after the Digital Personal Data Protection Act, 2023 (“DPDP Act” or “Act”) received Presidential assent. The Government has adopted a phased implementation approach, with most of the substantive obligations under the Act and Rules becoming operative 18 months from the date of notification, i.e., on 13 May 2027.
India Privacy
KS
King, Stubb & Kasiva
Article
How To Build A Privacy Compliance Framework For Your Organisation
A strong privacy compliance framework gives an organisation a structured way to manage personal data from collection to deletion. It connects legal requirements with everyday business processes, technology, contracts and employee responsibilities. For Indian organisations, this has become increasingly important following the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
India Privacy
MH
Mansukhlal Hiralal & Co.
Article
A Practical Data Protection Compliance Checklist For Indian Companies
Data protection is no longer only an IT issue. For Indian companies, it is becoming a core legal, governance and operational responsibility. A practical privacy compliance checklist helps businesses identify what personal data they collect, why they process it, who can access it, how it is protected and when it should be deleted. It also helps management identify gaps before they become regulatory, contractual or reputational problems.
India Privacy
MH
Mansukhlal Hiralal & Co.
Article
Website Compliance Under India’s DPDP Act: 15 Key Legal Requirements For Businesses
For businesses operating websites, mobile applications and digital platforms in India, privacy compliance is moving beyond the traditional practice of publishing a privacy policy and cookie banner. The Digital Personal Data Protection Act, 2023 (“DPDP Act”), read with the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), establishes a broader framework governing the collection and processing of digital personal data.
India Privacy
KS
King, Stubb & Kasiva
Article
Data Privacy Compliance For Apps And Websites Used By Children In India
India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 introduce specific safeguards for children's personal data, including verifiable parental consent and restrictions on tracking, behavioural monitoring and targeted advertising. For businesses operating mobile applications and websites used by children, privacy compliance cannot be reduced to a privacy policy or consent button—it requires understanding what data is collected, how child users are iden
India Privacy
MH
Mansukhlal Hiralal & Co.
Article
Dignity In The Digital Age: Delhi High Court Reiterates The Right To Be Forgotten
On May 29, 2026, the Delhi High Court delivered a landmark judgment in a batch of petitions that raised the same question, that stood at the intersection of constitutional law and the digital age viz. whether an individual whose name appears in judicial records that are accessible through internet search engines is entitled, by virtue of the right to informational privacy guaranteed under Article 21 of the Constitution, to seek de-indexing of those records from name-based search results and masking of personal identifiers (including names) from publicly accessible digital versions of those records.
India Privacy
SR
S.S. Rana & Co. Advocates
Article
Misleading Dark Patterns On Digital Platform: Consent Engineered Through Guilt
On June 01, 2026, the Central Consumer Protection Authority (CCPA) issued a significant order against Physicswallah Limited (hereinafter referred to as Party), the EdTech unicorn behind the pw.live platform, finding it guilty of deploying three distinct dark patterns. The matter taken up suo moto by CCPA culminated in a penalty of INR 5,00,000 and a binding direction to eliminate all dark patterns from the platform immediately.
India Consumer
SR
S.S. Rana & Co. Advocates
See more