Category Archives: Cyber Law

The DPDPA as an act has been in place for now over 16 months. The excuse “Rules are not notified” has begun to fade with the notification of the “Draft Rules”. Habitual procrastinators may still find excuse that the draft … Continue reading →

We have already discussed the status of Business Contact Address under DPDPA 2023 earlier and categorically held the view that a) We cannot determine the nature of an email as personal or business with reference to the domain name attached … Continue reading →

One of the most discussed provisions of the DPDPA Rules is the rule 10 and 11 related to the handling of personal data of a minor. As per the Act, a data fiduciary intending to process the personal data of … Continue reading →

The DPDPA Rules on Consent Manager (Rule no 4 with Schedule 1) is disappointing since it indicates that the ministry is stuck with its concept of account aggregator and has failed to go beyond the myopic view that the consent … Continue reading →

The DPDPA Rules contain two sets of rules. One set appliable immediately on publication and another set for which separate dates will be notified. The rules that will become immediately applicable namely Rules 1, 2 and 16 to 20 are … Continue reading →

Honourable Minister of IT Sri Ashwin Vaishnaw has indicated that the Government may create a Central body which works with other ministries and sectoral regulators to effectively implement local storage of data without causing any disruptions to the industry. The … Continue reading →