Introduction France’s decision to prohibit unsolicited telemarketing calls from August 2026 onwards marks a significant shift in the philosophy of consumer protection. Rather than requiring consumers to register their objection to marketing calls, the French approach reverses the presumption itself, businesses must obtain consent before making the call. The distinction is important because it determines…
AI Credit Scoring in India: Data Privacy, Explainability and Algorithmic Fairness under the DPDPA
- 2026-07-17
Introduction Lenders assessed creditworthiness using traditional indicators such as repayment history, income, and existing loans, with Credit Information Companies like CIBIL converting these into a credit score. AI-driven credit scoring is transforming this approach by analysing alternative data, including mobile usage, utility bill payments, digital transactions, app behaviour, and device patterns, to assess borrowers with…
Introduction Most organisations today can point to a compliant looking privacy setup, cookie banners, preference centres, and neatly maintained consent logs. However, the real issue is whether that choice actually changes anything. Increasingly, the answer appears to be no. Users click “Reject All”, withdraw consent, or opt out of tracking, yet data continues to flow…
Introduction Loyalty programs form the bedrock of customer retention and promotion strategies in Indian retail and e-commerce. They help in understanding and predicting customer behaviour. Loyalty programs also collect and analyze vast troves of personal data. This includes mobile numbers, transaction histories, geolocation, and behaviour insights. The Digital Personal Data Protection Act, 2023 (“DPDPA”), has…
Consent-Or-Pay Model: Choice Or Coercion?
- 2025-09-24
Introduction In recent years, a new monetization strategy has emerged in digital services: the “consent-or-pay” model. Under this approach, users of a platform are given a binary choice: either agree to pervasive data collection and personalized advertising (consent) or pay a fee for an ad-free experience. One recent example of this model is Meta’s “pay-or-consent”…
Introduction The Digital Personal Data Protection Act (hereinafter referred to as the “DPDPA” or “the Act”) 2023, alters how India looks at data privacy and compliance frameworks. One of the most talked about provisions of the Act is per-transaction, or granular, consent, which requires that a user must provide explicit consent for each and every…
Data Privacy Norms for Account Aggregators
- 2023-09-18
