Cyber law and data privacy in India: the DPDP Act, IT Act, CERT-In reporting, GDPR for Indian companies and bank account freezes.
The Kerala High Court has directed the Union Government to make the Data Protection Board of India functional within eight weeks. What the Digi Yatra ruling means for businesses handling personal and biometric data.
On 10 February 2026, the Ministry of Electronics and Information Technology (MeitY) notified the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026-India's first dedicated regulatory framework for AI-generated synthetic media-through Gazette Notification G.S.R. 120(E). Coming into force on 20 February 2026, the rules introduce a binding statutory definition of "Synthetically Generated Information" (SGI), compress takedown timelines to as little as two hours, mandate permanent provenance metadata on all synthetic content, and make compliance a condition for retaining safe harbour protection under Section 79 of the IT Act, 2000.
India's capital markets regulator has fired a decisive shot in the country's AI governance narrative. Through binding amendments to the Intermediaries Regulations and subsequent sweeping governance directives, the Securities and Exchange Board of India (SEBI) has placed every regulated entity—from the largest stock exchange to the smallest retail algorithmic trader—under a stringent new regime of accountability for Artificial Intelligence and Machine Learning (AI/ML) usage. The message is unambiguous: the era of the unattributed "black box" algorithm is over.
The core valuation of any successful digital marketplace or service aggregator—whether it is a ride-hailing app, a food delivery network, or a home-services platform—rests on its two-sided data engine. By continuously harvesting the behavioral data of customers and the performance metrics of vendors, platforms build an impenetrable competitive moat.
Software-as-a-Service (SaaS) is inherently borderless, allowing an Indian startup in Bengaluru or Kerala to seamlessly serve enterprise clients in Berlin, San Francisco, and Dubai. However, while the software is borderless, data protection laws are strictly territorial.
The UK Information Commissioner's Office (ICO) recently issued a substantial £14.47 million penalty to the global social media platform Reddit. This enforcement action highlights a critical compliance gap that we frequently encounter in legal practice across jurisdictions.
The post-pandemic boom in retail investing has birthed a massive sub-industry of financial influencers ("finfluencers") on social media platforms like YouTube, Instagram, and Telegram. While many provide genuine financial literacy and education, bad actors have increasingly weaponized their vast audiences to execute algorithmic market manipulation and run unregistered advisory schemes.
The Digital Personal Data Protection Act (DPDPA) of 2023 in India balances privacy rights and data processing needs, defining roles for stakeholders like data principals and fiduciaries.
Cybersecurity is the protection of computers, servers, mobile phones, electronic gadgets, networks, and data from hackers and malicious attacks.