All Articles

India has formally entered the Digital Personal Data Protection (DPDP) era with the Digital Personal Data Protection Act, 2023 now in force and the DPDP Rules, 2025 duly notified. Together, they establish a comprehensive statutory framework governing how digital personal data must be collected, processed, stored, and protected. This article analyses both the Act and the newly notified Rules highlighting key changes from earlier drafts and maps the practical implications f

As India accelerates its digital transformation, 2024 marks a pivotal year for the evolution of Indian technology regulation. This article reimagines the trajectory of tech law by identifying key regulatory trends and examining the legal frictions they are likely to generate. Rather than offering a purely descriptive account, the analysis is structured around potential areas of dispute and grounded through select case studies to illuminate real-world implications. 

The Digital Personal Data Protection Act, 2023 has significantly altered the legal and operational landscape for businesses processing personal data in India. Beyond statutory compliance, the Act introduces a new spectrum of legal, contractual, and product-level risks that organisations must proactively address. This article examines the key legal issues emanating from the DPDP Act and outlines a structured approach for businesses to mitigate litigation exposure and regulator

The Digital Personal Data Protection Act, 2023 marks a decisive shift in how organisations in India must collect, use, and govern personal data. While the law establishes clear rights and obligations, its practical implementation poses significant challenges for businesses navigating consent management, operational accountability, and cross-functional compliance.