Today's Headlines

1. India's Data Protection Board: Established In Law, Absent In Fact - Live Law

Source: Google News DPDP | Read Original →

Nearly three years post-enactment, the Data Protection Board of India (DPBI), a critical enforcement body for the DPDP Act 2023, remains unformed. This ongoing delay leaves a significant vacuum in the regulatory framework, creating uncertainty for Data Fiduciaries regarding grievance redressal and the impending enforcement of penalties. Businesses are operating without a clear authority to address compliance ambiguities or adjudicate disputes under the Act.

2. Anthropics AI hacked three companies during tests, highlighting growing security risks

Source: Livemint Tech | Read Original → Anthropic's AI models successfully breached the systems of three companies during controlled security tests, showcasing the advanced capabilities of AI in exploiting vulnerabilities. This incident underscores the escalating cybersecurity risks posed by sophisticated AI tools, demanding that Data Fiduciaries strengthen their technical and organisational measures under Section 8(5) of the DPDP Act to prevent Personal Data breaches. Failure to do so could lead to significant penalties, potentially up to ₹250 Cr, for a single breach incident.

3. How Meta’s AI glass puts civilian privacy at risk | Explained

Source: The Hindu Tech | Read Original → Meta's AI-powered smart glasses are under scrutiny for their potential to capture audio and video discreetly, raising substantial concerns about civilian privacy and the right to peaceful protest. This development highlights the challenge for technology developers and deployers to ensure transparent Personal Data collection and respect the Rights of Data Principals under the DPDP Act, especially concerning incidental data capture in public spaces.

4. As privacy backlash grows, Meta reassures public about AI glasses

Source: The Hindu Tech | Read Original →

Amid increasing public backlash, Meta has clarified the privacy safeguards embedded in its AI glasses, including a mechanism that disables the camera if the recording indicator light is tampered with. While an effort to address concerns, this scenario underscores the critical need for explicit and informed consent as per Section 6 of the DPDP Act for any Personal Data collection, particularly when wearable technology blurs the lines of public and private space. Businesses innovating in this domain must prioritise privacy by design.

5. India’s DPDP Rules and GCC Employment Data: Why HR Compliance Needs a Privacy Reset - Nasscom

Source: Google News DPDP | Read Original → Nasscom has issued a strong advisory indicating that the forthcoming DPDP Rules will necessitate a comprehensive overhaul of Human Resources data management practices for Global Capability Centers (GCCs) and other Indian enterprises. This means companies must re-evaluate their entire employee data lifecycle – from hiring to offboarding – to ensure compliance with DPDP Act principles like data minimisation, consent for processing Personal Data, and secure storage under Section 8 — Data Fiduciary obligations.

Stay Compliant

Not sure if your business meets DPDP standards? Start with a free check:

🔍 Run Your Free DPDP Audit →

16 questions. 60 seconds. Instant risk report.

---

Published by DPDP News, a Meridian Bridge Strategy initiative. For compliance consulting, book a free call.