Curated updates on the DPDP Act, enforcement actions, and data protection developments across India.
The Supreme Court declined to entertain a PIL on stolen personal data, directing the petitioner to MeitY and highlighting that operationalising the DPDP Act 2023 is an urgent executive task.
IAMAI has asked MeitY to intervene after NHRC issued notices to AI firms over alleged child-data lapses, arguing DPDP child-data duties are not yet in force.
NHRC has issued a notice to MeitY over systemic DPDP Act violations involving children’s data on major digital platforms, demanding an Action Taken Report in 15 days.
Kerala High Court has admitted a PIL against Digi Yatra’s biometric data practices and asked the Union government to clarify if the DPDP Act’s Data Protection Board has been constituted.
Karnataka plans to ban social media use by children under 16, raising questions on overlap with India’s DPDP Act and how the state will enforce age-based restrictions.
The Supreme Court has issued notice on challenges to the DPDP Act’s amendment of RTI Section 8(1)(j), declined to stay the change, and referred the matter to a larger bench.
MeitY has proposed reducing the DPDP compliance window from 18 to 12 months for Significant Data Fiduciaries, while fast‑tracking cross‑border transfer rules and state information‑seeking powers.
The Supreme Court has issued notice on writ petitions challenging the DPDP Act, 2023 and DPDP Rules, 2025, focusing on press freedom, RTI, and privacy rights.
MeitY has notified phased commencement of the DPDP Act and formally established the Data Protection Board of India, setting an 18‑month window for full compliance.
Receive scholarly publications, legal analysis, and research updates on data protection law and digital governance.
Academic communications only. Unsubscribe at any time.