SBI Data Leak Shows the Gap Before DPDP Breach Duties Take Effect
SBI found 3,897 customer records on the dark web. The DPDP Act would require it to tell the Board and every affected customer, but those duties start only in May 2027.
Curated updates on the DPDP Act, enforcement actions, and data protection developments across India.
SBI found 3,897 customer records on the dark web. The DPDP Act would require it to tell the Board and every affected customer, but those duties start only in May 2027.
Disposing of the Digi Yatra PIL, the Kerala High Court said it expects the Data Protection Board to be functional within eight weeks, after the Centre admitted it is not yet working.
MeitY has used its Section 43 power to correct the DPDP Act's wording on guardian consent for children and persons with disability, and on data audits by Significant Data Fiduciaries.
Principals, programme coordinators and administrative leaders at KLE Degree College, Nagarabhavi worked through how the DPDP Act applies to in the context of an educational institution.
Cabinet Secretary T V Somanathan has asked central ministries, states and UTs to draw up time-bound DPDP Act implementation plans and appoint senior nodal officers.
Shambhunath Yadiyapur writes in LiveLaw on the CCPA's PhysicsWallah dark patterns order and the data protection questions it leaves unanswered.
The Supreme Court declined to entertain a PIL on stolen personal data, directing the petitioner to MeitY and highlighting that operationalising the DPDP Act 2023 is an urgent executive task.
IAMAI has asked MeitY to intervene after NHRC issued notices to AI firms over alleged child-data lapses, arguing DPDP child-data duties are not yet in force.
NHRC has issued a notice to MeitY over systemic DPDP Act violations involving children’s data on major digital platforms, demanding an Action Taken Report in 15 days.
Kerala High Court has admitted a PIL against Digi Yatra’s biometric data practices and asked the Union government to clarify if the DPDP Act’s Data Protection Board has been constituted.
Receive scholarly publications, legal analysis, and research updates on data protection law and digital governance.
Academic communications only. Unsubscribe at any time.