Today's Headlines

1. WhatsApp usernames could open the platform to impersonations and scams, warn cybersecurity experts: Here is how

Source: Livemint Tech | Read Original →

WhatsApp's new username feature, while intended to enhance user privacy by removing the need to share phone numbers, is raising red flags among cybersecurity experts regarding potential impersonation and scam risks. For Indian businesses utilizing WhatsApp for customer communication, this change necessitates a review of how user identities are verified and how data processing aligns with Section 8 — Data Fiduciary obligations, especially concerning safeguarding personal data against misuse. Businesses must proactively assess new risks introduced by such features and reinforce their data protection strategies.

2. Meta loses bid to dismiss U.S. states' claims that Facebook, Instagram addict children

Source: The Hindu Tech | Read Original →

A U.S. court has denied Meta's attempt to dismiss claims that Facebook and Instagram are addictive for children, with the judge specifically citing the company's failure to comply with parental consent laws. This development serves as a critical warning for Indian businesses, particularly those operating social media platforms or services popular with minors, highlighting the stringent requirements under Section 9 — Processing of Personal Data of Children within the DPDP Act. Ensuring verifiable parental consent and implementing robust age-gating mechanisms are paramount to avoid similar legal challenges and potential penalties up to ₹250 Cr for non-compliance.

3. How CMP (Consent Management Platforms) Are Becoming Critical After the DPDP Act - Agency Reporter

Source: Google News DPDP | Read Original →%20Are%20Becoming%20Critical%20After%20the%20DPDP%20Act%20-%20Agency%20Reporter)

This article underscores the escalating importance of Consent Management Platforms (CMPs) for businesses navigating the new landscape under the DPDP Act. With Section 6 — Consent mandating clear, specific, and unambiguous consent, and requiring data fiduciaries to facilitate easy withdrawal, CMPs offer a structured solution for managing user preferences and demonstrating compliance. Adopting a robust CMP is no longer optional but a strategic imperative for any Indian business processing personal data, ensuring transparency and accountability in data handling.

4. Uber rolls out Record My Ride in India, raising questions over passenger consent - MediaNama

Source: Google News DPDP | Read Original → Uber's introduction of its "Record My Ride" feature in India is generating significant debate, primarily concerning the adequacy and validity of passenger consent for recording personal conversations during a ride. This initiative directly challenges the core principles of Section 6 — Consent and Section 8 — Data Fiduciary obligations of the DPDP Act, requiring Uber to ensure explicit, informed, and easily withdrawable consent from all passengers before any recording takes place. Failure to secure proper consent for such sensitive data processing could expose Uber to substantial penalties, potentially up to ₹250 Cr, and severe reputational damage.

Stay Compliant

Not sure if your business meets DPDP standards? Start with a free check:

🔍 Run Your Free DPDP Audit →

16 questions. 60 seconds. Instant risk report.

---

Published by DPDP News, a Meridian Bridge Strategy initiative. For compliance consulting, book a free call.