As global AI firms offer millions of Indians free access to their models through tie-ups with Indian telcos, a key question emerges: Is India’s vast user base becoming training data for global AI models and who is accountable when consent is buried inside a bundle?
India’s Digital Personal Data Protection (DPDP) Act, 2023 mandates strict compliance for businesses handling personal data, focusing on governance, transparency, and security. Companies must adapt quickly to avoid penalties and ensure data stewardship
Two years after Parliament passed the Digital Personal Data Protection Act, the government has finally notified its rules—but the notification reveals a framework too weak, too delayed, and too flawed to meaningfully protect citizens' privacy
The rules which were notified on 13 November raise the threshold of compliance for Significant Data Fiduciaries, which include e-commerce firms and social media intermediaries
While rules related to Data Protection Board will be effective from today, many obligations including those pertaining to cross border data transfer, additional obligations for big platforms have been shifted to 18 months
The rules spell out how companies must collect, secure, retain and erase personal data under India’s DPDP Act.
DIGIPIN, part of India's Digital India Mission, aims to improve address precision. However, challenges like governance, data privacy, digital literacy, and technical complexities must be addressed for successful adoption and implementation
By extending Arattai’s functionality into enterprise scenarios, Zoho aims to leverage its existing customer base and software ecosystem to offer a more integrated, secure alternative to global incumbents.
As AI agents become more powerful, capable of reading emails, pulling data from APIs and even sending messages or making transactions, a serious security threat is taking shape
The proposed consent management system emphasises that bundled or implied consent will not be allowed. Each data processing purpose must have its dedicated consent, and users must provide affirmative action before the company and process that data.
The European Data Protection Supervisor (EDPS) clarified that the EIB failed to provide sufficient evidence that personal data shared with India would be protected to the same standard as in the EU.
Connected vehicles collect vast personal data, which make them mobile data centres. The Digital Personal Data Protection Act, 2023 (DPDPA) mandates strict data protection standards, requiring transparency, consent, and robust security measures from automakers. Manufacturers must prioritise user privacy and consumers must demand transparency and control over personal data.
Under the proposed policy, data will be segregated into two baskets: data that can be shared with the public and data that cannot be shared with the public.
Persistent Systems said that its acquisition of Arrka is a strategic move aimed at integrating Arrka's Data Privacy Management platform into Persistent Systems’ existing AI-led services.
The society and government would have to work together to protect India’s data sovereignty, and the sooner we start, the better it would be for national interest as well as our individual data protection
The aggressive loan canvassing by NBFCs and loan app companies are a lure to the young to take the plunge. Often, they don’t understand the risks
By embracing ethical technology and product development, Indian companies can set new standards in responsible innovation, building a sustainable and trustworthy tech ecosystem. This balance will not only enhance their global competitiveness but also ensure that the technology serves the greater good, aligning with India's ethos and values
The good part is that India will finally have a data protection law – even if it is limited in its scope and has numerous flaws
The statement from the lender came after media reports said that the lender’s mobile application, Bob World, was involved in tampering of customer accounts
The long-running lawsuit was sparked by revelations in 2018 that Facebook had allowed British political consulting firm Cambridge Analytica to access data of as many as 87 million users.
TikTok has been under pressure for years to cordon off its U.S. operations because of concerns that it might provide data on American users to the Chinese authorities.
If the US and Europe don’t reach a data-transfer agreement, Meta may have to delete European user data from its American servers
Building a profile from user data to enable targeted phishing attacks on sensitive government accounts is plausible, however, there is no evidence that social media applications like TikTok has been used for this purpose.
The EAM was addressing the ’Festival of Thinkers’ organised by the Symbiosis International University here.