All Articles

India has formally entered the Digital Personal Data Protection (DPDP) era with the Digital Personal Data Protection Act, 2023 now in force and the DPDP Rules, 2025 duly notified. Together, they establish a comprehensive statutory framework governing how digital personal data must be collected, processed, stored, and protected. This article analyses both the Act and the newly notified Rules highlighting key changes from earlier drafts and maps the practical implications f

In India’s rapidly evolving digital economy, the boundaries between competition law and data privacy law are becoming increasingly porous. Traditionally, data protection and antitrust frameworks operated in separate legal silos with one focusing on individual privacy rights and lawful processing of personal data, and the other on ensuring fair competition in the marketplace.

The Digital Personal Data Protection Act, 2023 has significantly altered the legal and operational landscape for businesses processing personal data in India. Beyond statutory compliance, the Act introduces a new spectrum of legal, contractual, and product-level risks that organisations must proactively address. This article examines the key legal issues emanating from the DPDP Act and outlines a structured approach for businesses to mitigate litigation exposure and regulator

The Digital Personal Data Protection Act, 2023 marks a decisive shift in how organisations in India must collect, use, and govern personal data. While the law establishes clear rights and obligations, its practical implementation poses significant challenges for businesses navigating consent management, operational accountability, and cross-functional compliance.