Broad exemptions, delayed implementation, and weak oversight raise doubts about whether India’s Digital Personal Data Protection Act can truly protect privacy

By Dr Tuhinsubhra Giri

India stands at a crossroads. With 971 million internet users, 185 billion UPI transactions annually worth USD 3 trillion, and a digital economy projected to reach USD 1 trillion by 2027, the country has orchestrated one of history’s most ambitious digital transformations.

Yet this explosive growth rests on a fragile foundation, ie, trust. The Digital Personal Data Protection Act, 2023, enacted but still unimplemented two years later, represents India’s first attempt to codify that trust into law. The question is whether it will succeed, or whether its compromises ultimately undermine the very digital future

See Full Page