Introduction The hospitality sector presents a distinctive compliance problem under the Digital Personal Data Protection Act, 2023 (“DPDP Act, 2023”), read with the Digital Personal Data Protection Rules, 2025 (“DPDP Rules, 2025”). The personal data a hotel processes rarely originates from a single, controlled channel. It flows in through Online Travel Aggregators, walk-in bookings, corporate…
From Privacy Policies to System Architecture: The Supreme Court’s New Compliance Standard
- 2026-06-02
Your Privacy Policy is now Irrelevant! A strategic breakdown of the Supreme Court’s shift in “No Privacy by Design”!! On May 22, 2026, the Supreme Court quieted a massive structural debate in Pune Bar Association v. UOI. They ruled that data integrity is a matter of necessity, not convenience, making cryptographic hashing the absolute floor…
Introduction India’s fintech ecosystem now operates under a “dual compliance mandate”. RBI issued sectoral (or industry) norms and compliance with horizontal obligations of the Digital Personal Data Protection Act, 2023 (hereinafter referred to as the “DPDPA”) now. The result is a very complicated legal requirement for young start-ups whose business models rely on data. Both…
How the novel ‘Consent Manager’ framework under India’s DPDPA aims to centralize and simplify user data permissions, reducing repetitive requests. Current Reality: Decentralized & Overwhelming. Allow Cookies? Accept Terms & Conditions? Share Location Data? Marketing Opt-in Required Access Contacts? Enable Notifications? Track Activity? Data Principal Users are bombarded individually by every Data Fiduciary, leading to…
DPDPA 2023 MINDSET
- 2026-01-04
𝐏𝐨𝐥𝐢𝐜𝐢𝐞𝐬 𝐝𝐨𝐧’𝐭 𝐞𝐧𝐬𝐮𝐫𝐞 𝐜𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞. 𝐌𝐢𝐧𝐝𝐬𝐞𝐭𝐬 𝐝𝐨. 1. Accountability Data Fiduciary duty; demonstrate compliance 2. Purpose limitation Specified purpose; no incompatible processing 3. Data minimisation Only necessary personal data; reduce access 4. Notice to Data Principal Provide notice; clear, itemised information 5. Consent management Free, specific, informed; easy withdrawal 6. Data Principal rights Access; correction/erasure; nominate;…
Behavioural Biometrics & AI: Building A DPDP Act Compliant Fraud Stack For Real‑Time Payments
- 2025-12-19
Introduction The infrastructure for real-time digital payments in India has grown to be essential to daily financial transactions. Near-frictionless transactions at previously uncommon scales have been made possible by platforms like UPI, fast card settlements, and embedded fintech payment rails. However, the same accessibility and quickness that drive financial inclusion have also increased fraud risk….
