Dealing With Third Party & Vendor Consent Risk Under DPDP Act
India’s recently enacted Digital Personal Data Protection (DPDP) Act casts businesses into a realm where virtually all data…
Data Privacy
29 posts
AI, LLMs, and Consent: The Looming Challenge for India’s DPDP Act
Consider an application that generates personalised study plans. Or a chatbot that writes your job application. Or a…
When “Sign in with Google” Becomes “Google Acting as the User”: What the Recent Lawsuits Mean for Indian Regulation
A spate of high-profile lawsuits and settlements against Google over its data collection practices has shifted the public…
India’s Digital ID Systems and Consent: Can They Coexist?
India is at a pivotal point in its digital transformation. It is developing systems that are fundamentally changing…
Data Retention vs. Right to Be Forgotten: Navigating Legal Risks
The digital age has put personal data at the centre of individual rights and organizational obligations. On one…
Difference Between Processing Impact Assessment (PIA) and Data Protection Impact Assessment (DPIA)
Organizations in today’s data economy are enabling exciting complexities by sharing data with cloud service providers, CRM systems,…
The Silent Role of Metadata in Consent Management and DPDPA Enforcement
Metadata often called “data about data” is a quiet enforcer in the digital privacy world. It includes details…
Purpose Limitation in India’s DPDPA 2023: A Guide for Businesses
Ensuring strong data protection India has become crucial for businesses. A key principle is purpose limitation, which means…
Get Hold of Data Processing Agreements (DPAs) & Data Sharing Agreements (DSAs)
As personal data is the primary economic asset and regulatory liability in a world that demands more formalized…
Enforcement Deficit in DPDP Act: A Call for Federated Data Protection Authority.
Digital Personal Data Protection Act, 2023 (hereinafter referred as DPDP) governs the personal data protection of citizens and…