Mumbai, IndiaSaturday, 11 April 2026

DPDP News

Daily Intelligence on India's Data Law

Daily Briefing11 April 2026

DPDP Daily Brief — WhatsApp Under Fire, Compliance Challenges Mount

By AI Editor5 min read

Top Story

'The biggest consumer fraud': Telegram CEO claims WhatsApp is secretly reading your private messages

Today's Headlines

1. 'The biggest consumer fraud': Telegram CEO claims WhatsApp is secretly reading your private messages

Source: Livemint Tech | Read Original → Telegram CEO Pavel Durov has reignited concerns about WhatsApp's data handling, alleging that the messaging giant secretly reads and shares user messages. These claims, echoed by Elon Musk, if proven true, would represent a significant violation of data principal rights and data fiduciary obligations under the DPDP Act 2023, particularly Section 6 (Lawful Purposes and Consent) and Section 8 (Data Fiduciary obligations). Such unauthorized access could trigger substantial penalties, potentially up to ₹250 Cr per instance.

2. Elon Musk says WhatsApp's end-to-end encryption can't be trusted, Mark Zuckerberg's company calls it ‘absurd’

Source: Livemint Tech | Read Original →

Amidst a class-action lawsuit alleging Meta intercepted private messages, Elon Musk has publicly stated that WhatsApp's end-to-end encryption cannot be trusted, advocating for X Chat. These serious allegations directly challenge WhatsApp's claims of robust privacy and highlight critical concerns for Indian businesses regarding the reasonable security safeguards mandated by DPDP Act Section 9. If vulnerabilities or intentional intercepts are found, it could lead to severe regulatory action and a significant loss of user trust.

3. Consent as Governance under the DPDP Act: Understanding India's Most Misread Obligation - SCC Online

Source: Google News DPDP | Read Original →

This analysis emphasizes that consent under the DPDP Act is far more than a simple checkbox, requiring a comprehensive "governance" approach from data fiduciaries. It underscores the widespread misunderstanding of Section 6 (Lawful Purposes and Consent), which mandates clear, specific, unconditional, and revocable consent for personal data processing. Businesses must establish robust consent management frameworks to avoid non-compliance and respect data principal rights outlined in Section 7.

4. Most Indian businesses struggle to follow new data protection law - SME Futures

Source: Google News DPDP | Read Original →

A recent report indicates that a significant number of Indian businesses, particularly SMEs, are finding it challenging to fully comply with the new Digital Personal Data Protection Act. This widespread struggle highlights critical gaps in awareness, resources, and implementation of data fiduciary obligations under Section 8. It signals an urgent need for greater clarity, accessible compliance tools, and strategic guidance to help businesses navigate the complexities of data protection.

5. How India's digital personal data protection law shapes enterprise AI futures - CNBC TV18

Source: Google News DPDP | Read Original →

This article explores the profound influence of the DPDP Act on the future of Enterprise AI in India, particularly regarding how AI systems process personal data. It underscores the necessity for businesses to integrate privacy-by-design principles into AI development, ensuring adherence to DPDP Act tenets like purpose limitation, data minimization, and valid consent for training data as per Sections 6 and 8. Companies deploying AI must rigorously assess their data pipelines to avoid non-compliance and potential reputational damage.

Stay Compliant

Not sure if your business meets DPDP standards? Start with a free check:

🔍 Run Your Free DPDP Audit →

16 questions. 60 seconds. Instant risk report.


Published by DPDP News, a Meridian Bridge Strategy initiative. For compliance consulting, book a free call.