Data Protection
Perspectives on data protection across India and the subcontinent.
4 December 2025
Who Owns a Voice? Identity Rights in the Age of AI
A few minutes of recorded audio is enough to clone a voice convincingly. Indian courts have responded with a wave of personality rights orders — and the harder question is where protecting identity ends and restricting commentary begins.
3 December 2025
Digital Personal Data Protection Act, 2023 & Rules, 2025: FAQs
India's DPDP Act and the 2025 Rules reshape how businesses collect and handle personal data — consent, notices, breach reporting, and penalties up to ₹250 crore. A practical FAQ for businesses and individuals.
25 June 2019
The Personal Data Protection Bill, 2018 — and What Replaced It
The 2018 Bill drew heavily on the GDPR — data fiduciaries, sensitive personal data, localisation, penalties at 4% of global revenue. It never became law. The Digital Personal Data Protection Act, 2023 took a markedly different shape, and this is how the two compare.
24 June 2019
Key Features of the GDPR
The EU's GDPR reshaped how organisations handle personal data — with strict obligations, powerful data-subject rights, and revenue-based fines. A clear rundown of its scope, the rights it grants, the duties it imposes, and why it reaches Indian businesses too.
24 June 2019
An Introduction to the GDPR
The GDPR applies wherever EU residents' data is processed, regardless of where the processing happens — which is why it reached Indian businesses that had never operated in Europe. Scope, consent, access rights, and penalties reaching 4% of global revenue.
21 June 2019
India and the GDPR: Adequacy, Compliance and Cost
India has no adequacy decision from the European Commission, so transfers to Indian entities need safeguards — standard contractual clauses, pseudonymisation, DPOs. For the IT sector, that made GDPR compliance a commercial requirement rather than a legal one.