Today's Headlines

1. WhatsApp says Italian surveillance company tricked around 200 users into downloading spyware

Source: The Hindu Tech | Read Original → WhatsApp (Meta Platforms-owned) has revealed that an Italian surveillance firm, ASIGINT (a subsidiary of SIO), duped approximately 200 users into installing spyware. This incident underscores the persistent threat of sophisticated cyber-attacks and highlights the critical need for robust data security measures, directly aligning with Section 8 (Data Fiduciary obligations) to protect personal data from unauthorized access or processing. Businesses should note the potential penalties of up to ₹250 Cr under the DPDP Act if Indian data principals are affected by such breaches due to inadequate security.

2. USTR flags issues in DPDP Act, IT Rules provisions impacting firms - Business Standard

Source: Google News DPDP | Read Original →

The United States Trade Representative (USTR) has expressed concerns regarding specific clauses within India's DPDP Act and existing IT Rules, indicating potential compliance challenges for US companies operating in the Indian market. This development signals ongoing international scrutiny of India's data protection framework, particularly concerning cross-border data flows and the compliance burden on foreign entities, which could influence future regulatory interpretations. Indian businesses with global operations or foreign partnerships should closely monitor these discussions.

3. IAMAI sees 'overreach' in NHRC's notice to MeitY over AI companies' DPDP breaches - ET BrandEquity

Source: Google News DPDP | Read Original →

The Internet and Mobile Association of India (IAMAI) has criticized a notice from the National Human Rights Commission (NHRC) to MeitY concerning alleged DPDP Act breaches by AI companies, calling it an "overreach." This significant development highlights the nascent and potentially overlapping regulatory landscape for data protection, particularly as emerging technologies like AI come under scrutiny from various governmental bodies. Businesses leveraging AI must be prepared to navigate complex interpretations of Section 5 (Consent) and Section 8 (Data Fiduciary obligations), anticipating proactive oversight from multiple regulators before the Data Protection Board of India is fully operational.

4. Literal vs Purposive Interpretation in the DPDP Act, 2023 Understanding the Role of Consent - Legal Service India

Source: Google News DPDP | Read Original →

A recent legal analysis delves into the debate between literal versus purposive interpretation of the DPDP Act, 2023, with a specific emphasis on the concept of consent. This distinction is crucial for Indian businesses, as a purposive approach often demands more than just technical compliance, requiring a genuine commitment to the spirit of the law, especially regarding Section 5 (Consent) and Section 7 (Legitimate Uses of Data). Companies must prioritize transparent communication and robust mechanisms to ensure data principals genuinely understand and control their personal data.

5. CoinDCX launches ₹100 crore cybersecurity network after impersonation-linked controversy

Source: The Hindu Tech | Read Original →

Following an impersonation-linked controversy that led to arrests, crypto exchange CoinDCX has launched a substantial ₹100 crore Digital Suraksha Network to bolster cybersecurity research and education. This proactive investment underscores the severe reputational and financial consequences of security incidents involving personal data, even if not explicitly termed a DPDP Act breach. For other Indian businesses, it serves as a stark reminder of the urgent need to invest significantly in cybersecurity infrastructure and incident response plans, as mandated by Section 8 (Data Fiduciary obligations), to avoid hefty penalties and restore trust.

Stay Compliant

Not sure if your business meets DPDP standards? Start with a free check:

🔍 Run Your Free DPDP Audit →

16 questions. 60 seconds. Instant risk report.

---

Published by DPDP News, a Meridian Bridge Strategy initiative. For compliance consulting, book a free call.