Taking suo motu cognizance of the alarming rise in ‘digital arrest’ scams, the Supreme Court has sought detailed responses from the Union government and major telecom operators. The bench highlighted the urgent need for a coordinated framework to protect citizens from cyber-fraud operations exploiting digital identities and impersonating law enforcement agencies.

India's Digital Personal Data Protection Act, 2023 (DPDPA), marks a pivotal shift in data privacy, introducing a consent-centric framework and extraterritorial reach. Enacted in August 2023, with draft rules issued in January 2025, it aligns India with global standards like GDPR. Key features include stringent rules for children's data, cross-border transfer "blacklisting," and mandatory data breach notifications.

With India's Digital Personal Data Protection (DPDP) Act enacted but its rules unfinalized, businesses face a "compliance limbo" with penalties up to ₹250 crore. This editorial dissects the core operational hurdles like consent management and breach reporting. It explores how proactive firms can leverage "privacy-by-design" as a competitive advantage. Ultimately, we analyze the philosophical choice India faces between a GDPR-style framework and its own path, balancing citizen