In this episode, Shashank Venkat, Member – Technology Law Practice, and Prerana Reddy, Member – Technology Law Practice, discuss the Central Government’s powers under the Digital Personal Data Protection Act, 2023 to require the mandatory furnishing of information. They examine the legal grounds for such requests, potential overlaps with procedures under other laws, implications for intermediaries, non-disclosure directions, and the power to block access to data based on the “interest of the general public” standard.

In this episode, Aaron and Uttara unpack the provisionsrelated to the Data Protection Board under the Digital Personal Data ProtectionAct, 2023. They explain its composition and functions, the framework forimposing penalties, and the appeal process before the TDSAT, offering listenersa clear understanding of enforcement and available remedies within the dataprotection regime.

In this episode, Uttara Jhaveri, Member – Technology Law and Life Sciences & Healthcare Law Practice, and Sanjana Shrivastav, Member – Technology Law Practice, examine the personal data retention and erasure framework under the Digital Personal Data Protection Act, 2023. They explain how long a data fiduciary may retain personal data, when erasure is mandatory, minimum retention periods, extended timelines applicable to e-commerce platforms, online gaming intermediaries, and social media intermediaries, and the obligation to provide prior notice to the data principal before erasure of personal data.

In this episode, Prerana Reddy, Member – Technology Law Practice, and Shashank Venkat, Member – Technology Law Practice, unpack the concept of consent managers under the Digital Personal Data Protection Act, 2023. They discuss the role of consent managers, registration and eligibility requirements, and their key obligations, including fiduciary duties and accountability to data principals, prevention of conflicts of interest, record-keeping and audit requirements, restrictions on access to personal data, and enforcement considerations.

In this episode, Prerana Reddy, Member – Technology Law Practice, and Uttara Jhaveri, Member – Technology Law and Life Sciences & Healthcare Law Practice, discuss the exemptions under the Digital Personal Data Protection Act, 2023. The episode covers activity-based exemptions, entity-based exemptions applicable to certain data fiduciaries and startups, and limited situations where the Act does not apply in its entirety, highlighting how the law adopts a proportional and context-driven approach to data protection compliance.

In this episode, Aaron Kamath, Lead – Tech, Digital & Commercial Law Practice, and Uttara Jhaveri, Member – Technology Law and Life Sciences & Healthcare Law Practice, break down the key obligations of Data Fiduciaries and Significant Data Fiduciaries under the Digital Personal Data Protection Act, 2023. They discuss the requirements to implement appropriate technical and organisational measures, reasonable security safeguards to protect personal data, personal data breach notification obligations, additional duties applicable to Significant Data Fiduciaries, and the framework governing cross-border transfers of personal data.

In this episode, Aaron Kamath, Lead – Tech, Digital & Commercial Law Practice, and Uttara Jhaveri, Member – Technology Law and Life Sciences & Healthcare Law Practice, break down the rights available to data principals under the Digital Personal Data Protection Act, 2023, and discuss their duties, including lawful conduct and accuracy. The episode offers clear explanations, real-world examples, and practical takeaways for listeners navigating compliance and accountability in today’s digital landscape.

In this episode, Uttara Jhaveri, Member – Technology Law and Life Sciences & Healthcare Law Practice, and Prerana Reddy, Member – Technology Law Practice, examine the notice and consent framework under the Digital Personal Data Protection Act, 2023. They discuss purpose limitation in notice and consent, verifiable consent requirements for processing the personal data of children and persons with disabilities, and touch upon the legitimate use grounds under which personal data may be processed without obtaining consent.