India's Digital Personal Data Protection Act, 2023 (DPDPA), marks a pivotal shift in data privacy, introducing a consent-centric framework and extraterritorial reach. Enacted in August 2023, with draft rules issued in January 2025, it aligns India with global standards like GDPR. Key features include stringent rules for children's data, cross-border transfer "blacklisting," and mandatory data breach notifications.

AI-powered cyber attacks represent a new frontier of corporate liability. These are not just technical issues; they are events giving rise to significant legal exposure, complex disputes, and intense regulatory scrutiny under frameworks like the DPDP Act, 2023. The actions of an autonomous algorithm can now directly impact a company's legal standing, its compliance posture, and its vulnerability to litigation. Understanding this evolving threat is a professional necessity.

The Punjab & Haryana High Court has struck down the practice of requiring an accused to continuously share their live Google Maps location as a bail condition. The Court held this to be an excessive and disproportionate infringement of the fundamental right to privacy under Article 21. Calling the practice a form of "virtual confinement," the judgment emphasized that any restriction on a fundamental right must be reasonable and satisfy the test of proportionality

A deep dive into how India’s Digital Personal Data Protection Act compares with Europe’s GDPR—key differences, compliance, and legal insight