Privacy Law and Privacy Regulations

The Digital Personal Data Protection Act, 2023 introduced a new privacy framework for India and established important roles for organisations handling digital personal data. Among the most important concepts are data fiduciaries and data processors. Understanding these roles is essential because the classification determines who decides why and how personal data is processed, who acts on another organisation's instructions and where compliance responsibility sits.

Organisations increasingly rely on personal data to operate digital products, analyse customers, personalise services and develop new technologies. As data use becomes more complex, businesses need a structured method to identify privacy risks before they become legal, financial or operational problems.

Australia’s privacy reforms increase the importance of privacy as a governance issue for independent schools. Boards and executive teams should understand what personal and sensitive information their school holds, how it is accessed and shared, and where monitoring technologies, third-party platforms and automated decision-making tools are used.

China's revised Good Clinical Practice for Drug Trials took effect on 1 September 2026, fundamentally reshaping the regulatory landscape for clinical trials by aligning domestic requirements with ICH E6(R3) standards. The new framework introduces streamlined regulations spanning just 54 articles across six chapters, while establishing comprehensive data governance requirements and clarifying ultimate accountability for sponsors, principal investigators, and clinical trial institutions. Companies conducting

Singapore's Personal Data Protection Commission has issued new guidelines clarifying how companies must handle personal data when developing and deploying generative AI systems. These guidelines address critical compliance questions around publicly available data, consent requirements, anonymization practices, and ongoing obligations for access and correction requests throughout the AI lifecycle.

The Digital Personal Data Protection Act, 2023 introduced a new privacy framework for India and established important roles for organisations handling digital personal data. Among the most important concepts are data fiduciaries and data processors. Understanding these roles is essential because the classification determines who decides why and how personal data is processed, who acts on another organisation's instructions and where compliance responsibility sits.