Today's Headlines

1. Over 100 Chrome extensions caught stealing Google and Telegram data: How to stay safe?

Source: Livemint Tech | Read Original →

Cybersecurity experts have uncovered a widespread campaign involving 108 Google Chrome extensions that collectively stole user data and hijacked Telegram sessions from an estimated 20,000 installations. This incident underscores the pervasive risk from seemingly innocuous software and highlights the critical need for robust endpoint security within organizations. For Data Fiduciaries, this necessitates a re-evaluation of security safeguards under Section 8 of the DPDP Act, with potential penalties up to ₹250 Cr for non-compliance following a breach.

2. OpenAI launches a less restricted GPT-5.4 Cyber model, but you won't find it on ChatGPT

Source: Livemint Tech | Read Original → OpenAI has unveiled its new GPT-5.4 Cyber model, a specialized AI designed for defensive cybersecurity tasks and made available to vetted vendors and researchers. This development signals a growing industry focus on leveraging advanced AI to combat sophisticated cyber threats. While not publicly accessible via ChatGPT, its existence emphasizes the importance of employing cutting-edge security technologies to protect personal data, a key obligation for Data Fiduciaries under DPDP Act's Section 8.

3. Why data breach response is a board-critical cyber risk issue for BFSI - EY

Source: Google News DPDP | Read Original →

A recent report by EY emphasizes that a robust data breach response strategy is no longer just an IT concern but a board-level imperative, especially for the Banking, Financial Services, and Insurance (BFSI) sector. The sector faces heightened scrutiny and significant financial penalties under DPDP (up to ₹250 Cr) for data breaches, necessitating comprehensive incident response plans and clear communication protocols. This highlights the governance aspect of DPDP Act's Section 8 on security measures and breach notification.

4. What India’s Digital Personal Data Protection Act Means for Adtech Platforms - Agency Reporter

Source: Google News DPDP | Read Original →

The DPDP Act introduces significant shifts for Adtech platforms, mandating explicit and informed consent for processing personal data, thereby reshaping their traditional data collection and targeting methodologies. Businesses in this sector must overhaul their data practices to ensure transparency, data minimization, and verifiable consent, aligning with Section 6 of the Act to avoid substantial fines and maintain user trust. This requires a fundamental re-evaluation of how user data is acquired and utilized for advertising purposes.

5. AuthBridge Partners with Redacto to Solve Consent Governance for India’s DPDP Era - CXOToday.com

Source: Google News DPDP | Read Original → AuthBridge has announced a strategic partnership with Redacto to offer comprehensive consent governance solutions tailored for the DPDP Act. This collaboration aims to help Indian businesses effectively manage and track user consent, a foundational requirement under Section 6 of the Act. Such partnerships are crucial for providing the tools and expertise needed to navigate the complexities of consent management, ensuring compliance and building trust with Data Principals.

Stay Compliant

Not sure if your business meets DPDP standards? Start with a free check:

🔍 Run Your Free DPDP Audit →

16 questions. 60 seconds. Instant risk report.

---

Published by DPDP News, a Meridian Bridge Strategy initiative. For compliance consulting, book a free call.