Introduction France’s decision to prohibit unsolicited telemarketing calls from August 2026 onwards marks a significant shift in the philosophy of consumer protection. Rather than requiring consumers to register their objection to marketing calls, the French approach reverses the presumption itself, businesses must obtain consent before making the call. The distinction is important because it determines…
Introduction WhatsApp has started asking some users in India to confirm they are over eighteen before they can keep using the app. On its face, it looks like nothing more than another screen to tap through, the kind of prompt people barely register before moving on. But the timing tells a different story. This age…
Introduction The hospitality sector presents a distinctive compliance problem under the Digital Personal Data Protection Act, 2023 (“DPDP Act, 2023”), read with the Digital Personal Data Protection Rules, 2025 (“DPDP Rules, 2025”). The personal data a hotel processes rarely originates from a single, controlled channel. It flows in through Online Travel Aggregators, walk-in bookings, corporate…
Introduction The healthcare sector in India is witnessing a change with the advancement of technology. The use of medical devices is not limited to wards and laboratories anymore. Smart insulin pumps, fitness trackers, heart rate monitors, intelligent diagnostic applications, image processing systems, and patient monitoring applications are some of the many innovations that form part…
Introduction The European Data Protection Board (“EDPB”) has issued detailed guidelines on anonymisation and web scraping in the context of generative AI. These guidelines clarify when data can be considered truly “anonymous” and therefore outside the scope of the EU General Data Protection Regulation (“GDPR”). Although the guidelines are not binding in India, they are…
Introduction While facial recognition technology has emerged as a critical tool for policing and infrastructural purposes in India, the technology’s use does not have a legal mechanism that is specifically designed to regulate it. While the Digital Personal Data Protection Act, 2023 (“DPDP Act”) provides for a legal framework on how personal data should be…
Introduction Cloud regulation is no longer limited to questions of data protection and cybersecurity. Increasingly, governments are also examining who controls the infrastructure on which data is stored, processed, and accessed. Reflecting this shift, the European Commission proposed the Cloud and AI Development Act on 3 June 2026, a legislative initiative aimed at strengthening the…
Introduction ‘Facial Recognition Technology’ has become more and more predominant in Society as technology has developed over time. We have transitioned from a period where we required a high-quality and expensive camera with an experienced photographer to take a single photo to a point where any layperson can take a photo, such was the development…
Your Privacy Policy is now Irrelevant! A strategic breakdown of the Supreme Court’s shift in “No Privacy by Design”!! On May 22, 2026, the Supreme Court quieted a massive structural debate in Pune Bar Association v. UOI. They ruled that data integrity is a matter of necessity, not convenience, making cryptographic hashing the absolute floor…
The Government of India wants to turn law into code. This is bigger than automation!! MeitY is reportedly exploring “law-to-code” translating DPDPA provisions into machine executable rules so systems enforce compliance by design. The logic is sound. When AI moves at machine speed, governance cannot run at the speed of a legal opinion. A system…
Introduction The introduction of generative Artificial Intelligence (“AI”) into the mainstream digital communication platforms is rapidly changing the way we interact online. One of the latest developments in this space is Meta’s reported exploration of privacy-focused AI chat functionality using “Private Processing” technology, which may eventually be introduced across WhatsApp and the Meta AI ecosystem….
GDPR turns Eight this May!! Day One, 25 May 2018, 4 Complaints were filed within hours!!! Eight years later, GDPR fines have crossed €7.1 billion!!! Now look at India 1.4 billion people. 900 million internet users. The largest digital footprint any privacy regulator has ever been asked to supervise. UPI clears more transactions in a…
Introduction The European Parliament and the Council of the European Union have reached a provisional political agreement to amend the EU Artificial Intelligence Act (“AI Act”) as part of the broader “Digital Omnibus on AI” legislative initiative. One of the key developments under the proposed amendments is the prohibition of AI systems designed or used…
Introduction The blood banking sector plays a critical but underappreciated role within the healthcare system. It handles thousands of blood samples every day, all of which are associated with particular donors and receivers. Therefore, the institutions act as custodians of highly personal and confidential information, including health-related data. In today’s technological age, they have gone…
Introduction AI systems are gradually moving beyond generating responses and are now beginning to take actions across systems with limited human involvement. They plan tasks, interact with external systems, retrieve and process data, and carry out multi-step actions with limited human involvement. These systems, commonly referred to as ‘AI agents’, are already being used across…
Introduction Most organisations today can point to a compliant looking privacy setup, cookie banners, preference centres, and neatly maintained consent logs. However, the real issue is whether that choice actually changes anything. Increasingly, the answer appears to be no. Users click “Reject All”, withdraw consent, or opt out of tracking, yet data continues to flow…
On 2 March in CIO and 5 March in Computerworld, I outlined how the Anthropic & OpenAI–DoD clash would unfold. Anthropic’s latest filing in the Northern District of California follows exactly the framework I predicted, confirming that analysis. Further, this is no longer a policy debate rather it is a constitutional test of whether the…
Introduction The ongoing massive use of personal data drives the present-day digital economy. Every online transaction, whether using a mobile application, registering for a service, or making a digital payment, generates data that businesses analyse and process for a variety of uses. Although people typically give their information to a specific platform, the information rarely…
You clicked “I Agree” on a quick commerce app. That was 5 months ago. Since then, the AI has figured out you are likely pregnant. Probably diabetic. Financially stretched every third week of the month. You never consented to any of that. You consented to delivery. This is what I call “Agentic Consent Collapse” It…
Introduction In the evolving corporate environment, the transition from static software to dynamic AI agents is basically reshaping how business is conducted. No more confined to simple “if-then” logic, AI-driven automation is now powering sophisticated operations across several sectors. In customer service, intelligent agents handle complex inquiries and process refunds in real time, they conduct…
Introduction Social platforms designed for interaction between autonomous Artificial Intelligence (“AI”) agents present a new category of legal and technical risk. Unlike conventional platforms where user conduct is the primary source of exposure, AI-agent environments involve automated generation, storage, and exchange of data without continuous human oversight. This increases the likelihood that technical misconfigurations may…
Introduction The challenge before SC centres on Section 44(3) of the DPDP Act, which amends Section 8(1)(j) of the Right to Information Act. While Section 8(1)(j) previously permitted disclosure of personal information in cases of larger public interest, the amendment under the DPDP Act now effectively bars such disclosure. We are moving away from “discretionary…
𝐃𝐞𝐞𝐩𝐟𝐚𝐤𝐞 𝐢𝐧 𝐈𝐧𝐝𝐢𝐚 C𝐡𝐞𝐜𝐤𝐞𝐝 𝐰𝐢𝐭𝐡 𝐈𝐓 𝐀𝐦𝐞𝐧𝐝𝐦𝐞𝐧𝐭 𝐑𝐮𝐥𝐞𝐬, 𝟐𝟎𝟐𝟔 Effective Date: February 20, 2026 The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026 fundamentally restructures digital accountability, specifically targeting the unregulated growth of synthetic media. Key Statutory Changes 𝐃𝐞𝐟𝐢𝐧𝐢𝐭𝐢𝐨𝐧 𝐨𝐟 𝐒𝐲𝐧𝐭𝐡𝐞𝐭𝐢𝐜 𝐌𝐞𝐝𝐢𝐚: A new legal category for “synthetically generated information” now…
The Privacy Paradox- Debunking 14 Critical Myths of Modern Data Protection! Stop treating the DPDPA like a legal homework assignment. Dismantling misconceptions to foster a culture of proactive compliance and strategic resilience. Common Myths vs. The Reality Common Myths Myth: Our business is too small to be a target. Myth: Privacy compliance is a barrier…
AI Models now know when they’re being tested. And they fake compliance. The 2026 International AI Safety Report, chaired by Turing Award winner Yoshua Bengio, documents something every techno lawyer and AI Systems deployers, creators, importers should understand. Some frontier AI models can now distinguish between evaluation and deployment contexts and alter their behavior accordingly….
How the novel ‘Consent Manager’ framework under India’s DPDPA aims to centralize and simplify user data permissions, reducing repetitive requests. Current Reality: Decentralized & Overwhelming. Allow Cookies? Accept Terms & Conditions? Share Location Data? Marketing Opt-in Required Access Contacts? Enable Notifications? Track Activity? Data Principal Users are bombarded individually by every Data Fiduciary, leading to…
Introduction The discourse on Artificial Intelligence (“AI”) has moved decisively from the realm of capability to that of governance architecture. The White Paper released by the Office of the Principal Scientific Adviser, titled “Strengthening AI Governance Through Techno-Legal Frameworks,” depicts India as an adopter of AI but as a country that is seeking to build…
Under the Union Budget 2026–27, localisation of data through Indian data centres has clearly emerged as the central pillar for operationalising the DPDP Act. By aligning data localisation with fiscal and tax incentives for foreign companies setting up data centre operations in India, the Budget also signals that compliance and investment can go hand in…
Top 14 Insights from “Techno Legal Whitepaper on Strengthening AI Governance” by the Office of the Principal Scientific Adviser to the Government of India (Released on 23rd January, 2026) 1. Techno Legal Framework: It integrates legal instruments and rule-based conditioning directly into the technical architecture of an AI system by design. 2. Objectives : It…
In the age of Human-In-Loop (HIL) and Human-On-Loop (HOL), Moltbook is a social media for AI Agents to post, and Human can Observe!! Here is why it is a legal ticking time bomb in force? 1.You own what your AI bot says. If your agent leaks a trade secret or smears a competitor in a…
Disclaimer & Confirmation
As per the rules of the Bar Council of India, law firms are not permitted to solicit work and advertise. By clicking on the “I AGREE” button below, user acknowledges the following:
However, the user is advised to confirm the veracity of the same from independent and expert sources.