
The Legal Perils of Dark Patterns in India: Intersection between Data Privacy and Consumer Protection
In 2023, two significant regulatory developments reshaped India’s digital legal framework. First was the Digital Personal Data Protection Act, 2023 (DPDPA)1 India’s novel data privacy law enacted on 13-8-2023. The second was the Guidelines for Prevention and Regulation of Dark Patterns, issued on 30-11-20232 under the Consumer Protection Act,...

The Velvet Glove and the Iron Fist (A Comparison of the New Online Gaming Law with DPDPA)
The Ministry of Electronics and Information Technology has introduced the Promotion and Regulation of Online Gaming Act (‘PROGA’), two years after…
Read...

Data Localization and DPDPA – A Primer
What is it ? Data localization refers to the requirement of storing all data or certain categories of data physically within a region or country’s…
Read...

The Tale of Two Laws — Does the DPDPA Dilute the RTI Act?
In the past week, public discussion around the potential of the India’s Digital Personal Data Protection Act, 20232 (DPDPA) to “dilute” the Right to Information Act, 20053 (RTI Act) has grown shriller.
Read...

Data Deletion — A Key Compliance under the Digital Personal Data Protection Act, 2023
The phrase “data is the new oil” has created a misconception that all pieces of data have value and so it should be stored. Thinking that there is value in data, all types of data collecting entities such as individuals, companies, government departments and professionals, etc. are in the habit of storing data indefinitely, beyond their...

DPDPA’s Impact on Hospitals in India—Complacency will prove costly
The Indian healthcare market has experienced substantial growth from USD 110 Billion in 2016 to USD 638 Billion in 2025, with the hospital sector…
Read...

Privacy implementation requires regular data deletion
Data in any organization is plagued by three human frailties. One—the fondness to accumulate, two– the inertia to throw things and…
Read...

The impact of the DPDPA on Indian hotels
The Indian hotel industry is one of the fastest growing industries with a market size of around USD 24.61 billion and it is expected to grow to USD…
Read...

What Constitutes Publicly Available Personal Data under DPDP, 2023?
The proposed Digital Personal Data Protection has seen a major shift in its applicability over publicly available personal data.

Age of Consent for Children – Digital Personal Data Protection (DPDP) Bill 2023
The DPDP Bill 2023 mandates that the age of children for whom parental consent is required as 18.

