Today's Headlines

1. Drones to monitor traffic, track suspects and power aerial surveillance in Hyderabad’s Malkajgiri

Source: The Hindu Tech | Read Original →

Hyderabad's Malkajgiri district is rolling out a sophisticated surveillance system featuring AI-enabled drones, facial recognition, and predictive analytics for policing and traffic management. This initiative by public authorities highlights the growing use of advanced technology for data collection and processing, raising critical questions under Section 4 (Lawful Purpose) and Section 7 (Legitimate Uses) of the DPDP Act regarding the necessity and proportionality of collecting extensive personal data for state functions. Businesses should note the government's approach to technology and data, as similar principles of data minimization and security will apply to their private sector operations.

2. Researchers warn new WiFi technology can identify your even without tracking your phone: ‘Means for surveillance’

Source: Livemint Tech | Read Original →

Researchers at Karlsruhe Institute of Technology have flagged a new WiFi technology that can identify individuals even if they aren't connected to a network, turning ordinary routers into covert tracking tools. This development is a significant concern for Data Fiduciaries under the DPDP Act, particularly regarding Section 6 (Consent) and Section 8 (Data Fiduciary obligations), as it poses a new challenge for obtaining explicit and informed consent when personal data could be collected surreptitiously. Businesses operating public WiFi or even private networks must be vigilant about the capabilities of their technology to avoid unintentional or non-compliant data collection.

3. Supreme Court Issues Notice on Pleas Challenging DPDP Act’s Impact on RTI Act - Moneylife

Source: Google News DPDP | Read Original →

The Supreme Court has issued notices on petitions challenging the DPDP Act's amendments to the Right to Information (RTI) Act, specifically Section 44 which modifies Section 8(1)(j) of the RTI Act. This legal development signifies a critical moment for balancing individual privacy rights against public transparency, potentially redefining the scope of accessible public information. Businesses that frequently deal with information requests, whether from government bodies or the public, should closely monitor this case, as its outcome will clarify the intersection of privacy and transparency obligations.

4. 'Pronto's use of customer data early test of DPDP Act implementation' - Business Standard

Source: Google News DPDP | Read Original →

Reports indicate that Pronto's handling of customer data is emerging as an early litmus test for the effective implementation of the DPDP Act. This case will likely set precedents for how the Data Protection Board of India (DPBI) interprets and enforces Section 8 (Data Fiduciary obligations), particularly concerning data processing, storage, and purpose limitation. All businesses, especially startups utilizing innovative data models, should pay close attention to this unfolding situation as it will provide crucial insights into regulatory expectations and potential enforcement actions.

5. How Private Sector Banks Like Kotak Mahindra & HDFC Stealing Data From MCA and Harassing Young Startups. Even RBI & Government Has No Control On Them Despite DPDP Act. - inventiva.co.in

Source: Google News DPDP | Read Original →

Serious allegations have surfaced against private sector banks like Kotak Mahindra and HDFC, accusing them of 'stealing' data from the Ministry of Corporate Affairs (MCA) and using it to harass young startups. If proven, this would represent a grave breach of the DPDP Act, particularly regarding Section 6 (Consent), Section 8 (Data Fiduciary obligations) concerning purpose limitation and security, and Section 13 (Data Principal Rights). This underscores the significant financial and reputational risks data fiduciaries face, with potential penalties reaching up to ₹250 Crore for major non-compliance, emphasizing the urgent need for stringent data governance, even for publicly available data.

---

DPDP Impact Analysis

Today's headlines paint a vivid picture of India's evolving data protection landscape, showcasing a critical period where legal interpretations, technological advancements, and enforcement actions converge. The Supreme Court's decision to issue notice on petitions challenging the DPDP Act's impact on the RTI Act is perhaps the most fundamental development. This case will not only shape how personal data is handled by public authorities but also influence the disclosure standards for private entities under public scrutiny. Businesses must recognize that the interplay between privacy and transparency is still being defined at the highest levels, necessitating agility in their compliance strategies.

Beyond legal challenges, the news highlights a dual focus on emerging surveillance technologies and the practical enforcement of the Act. The proposed drone surveillance in Hyderabad and the potential for covert WiFi tracking underscore the rapid pace at which technology can collect personal data, often without explicit consent or even awareness. For businesses, this means expanding their understanding of what constitutes "personal data" and how it might be collected, even indirectly. Compliance under Section 6 (Consent) and Section 8 (Data Fiduciary obligations) is becoming increasingly complex, requiring proactive measures to assess all potential data collection vectors and ensure transparency with Data Principals.

The alleged data misuse by banks like Kotak Mahindra and HDFC, coupled with the Pronto case, signals that the Data Protection Board of India (DPBI) is gearing up for active enforcement. These instances are not merely isolated incidents but critical test cases that will establish precedents for how the Act is applied across sectors. Businesses, particularly those in finance, tech, and other data-intensive industries, must view these cases as a clear warning: the DPDP Act is not just a paper tiger. Failure to adhere to principles like purpose limitation, data minimization, and robust security safeguards could lead to severe penalties, potentially up to ₹250 Crore.

Collectively, today's news reinforces that robust data governance is no longer optional but a fundamental operational imperative. Indian businesses must move beyond basic compliance checklists and embed data protection into their core strategies and technological infrastructure. This involves investing in Data Protection Officers (DPOs), conducting regular data protection impact assessments (DPIAs), and ensuring that all third-party vendors and internal processes align with DPDP principles. The ongoing legal debates, technological shifts, and early enforcement actions all point towards a future where data protection dictates competitive advantage and consumer trust.

---

Stay Compliant

Not sure if your business meets DPDP standards? Start with a free check:

🔍 Run Your Free DPDP Audit →

16 questions. 60 seconds. Instant risk report.

---

Published by DPDP News, a Meridian Bridge Strategy initiative. For compliance consulting, book a free call.