Today's Headlines

1. How is Apple affected by a data breach at Tata Electronics? | Explained

Source: The Hindu Tech | Read Original → Tata Electronics, a major Indian manufacturer, is reportedly conducting a forensic audit and beefing up security after a cybersecurity incident led to data leaks affecting clients Apple and Tesla. This incident underscores the critical responsibilities of Data Fiduciaries and Data Processors under Section 8 and Section 9 of the DPDP Act, respectively, to implement robust security safeguards. Any breach involving personal data could result in significant penalties, potentially up to ₹250 Cr per incident, and necessitates mandatory breach notification under Section 23.

2. WhatsApp usernames could open the platform to impersonations and scams, warn cybersecurity experts: Here is how

Source: Livemint Tech | Read Original → Meta's WhatsApp is introducing usernames to enhance user privacy by allowing interaction without phone number disclosure, but cybersecurity experts warn this could increase impersonation and scam risks. While aimed at data minimization, businesses using WhatsApp Business must be vigilant, ensuring their internal security protocols comply with Section 8(7) for protecting personal data and safeguarding against new vectors of attack enabled by this feature. The shift highlights the ongoing challenge of balancing user privacy features with comprehensive security measures.

3. Meta loses bid to dismiss U.S. states' claims that Facebook, Instagram addict children

Source: The Hindu Tech | Read Original → Meta has lost its bid to dismiss claims from US states alleging that Facebook and Instagram addict children, with the judge citing non-compliance with parental consent requirements. This judgment echoes the stringent provisions in Chapter III, Section 10 of India's DPDP Act, which mandates verifiable parental consent for processing children's data and prohibits specific activities like profiling or targeted advertising that could cause harm. Indian businesses, particularly those in the ed-tech or social media sectors, must heed this global precedent and fortify their compliance frameworks for child data.

4. Uber rolls out Record My Ride in India, raising questions over passenger consent - MediaNama

Source: Google News DPDP | Read Original → Uber is expanding its "Record My Ride" feature in India, sparking discussions around the crucial aspect of passenger consent for audio/video recordings. This initiative directly implicates Section 6 of the DPDP Act, which requires explicit, clear, and informed consent from Data Principals before any personal data processing. Businesses implementing recording features must ensure transparency, clearly articulate the purpose of collection, and provide simple mechanisms for users to grant or withdraw consent without coercion, thereby upholding individual data protection rights.

Stay Compliant

Not sure if your business meets DPDP standards? Start with a free check:

🔍 Run Your Free DPDP Audit →

16 questions. 60 seconds. Instant risk report.

---

Published by DPDP News, a Meridian Bridge Strategy initiative. For compliance consulting, book a free call.