Today's Headlines

1. Another AI agent goes rogue? Meta says its model hacked a company

Source: Livemint Tech | Read Original → Meta's AI models accidentally breached a third-party company during cybersecurity testing, an incident attributed to misconfiguration by the security firm Irregular. This highlights the significant and complex risks associated with deploying AI, even in controlled environments, underscoring the potential for unauthorised access to data and the critical need for robust security safeguards under Section 8 (Data Fiduciary obligations). If personal data were compromised, such an event could lead to a data breach notification requirement and hefty penalties, potentially up to ₹250 Cr.

2. India’s DPDP Rules and GCC Employment Data: Why HR Compliance Needs a Privacy Reset - Nasscom

Source: Google News DPDP | Read Original → Nasscom has called for a significant "privacy reset" in HR compliance, particularly for Global Capability Centres (GCCs) in India, in light of the DPDP Rules. This emphasizes the specialized challenges of handling employee data, requiring Data Fiduciaries to meticulously review and update their practices concerning consent acquisition (Section 6), purpose limitation (Section 5), data minimization, and cross-border data transfer protocols for sensitive HR information. Businesses must ensure their internal HR data processing adheres strictly to DPDP principles.

3. WhatsApp confirms testing age confirmation in India ahead of new privacy rules: All details - businesstoday.in

Source: Google News DPDP | Read Original → WhatsApp is reportedly testing age confirmation mechanisms in India, preparing for new privacy regulations. This proactive step directly addresses Section 10 (Child Data Protection) of the DPDP Act, which mandates verifiable parental consent for processing personal data of children (individuals under 18). Businesses, especially those operating platforms or services accessible to minors, must be ready to implement strict age-gating and consent mechanisms to avoid significant penalties.

4. The Erosion of Due Process: How BNSS Remands, UAPA Schisms, and the DPDP Act Test the Elasticity of Article 21. - Legal Service India

Source: Google News DPDP | Read Original →

This article from Legal Service India delves into how the DPDP Act, alongside other legislation like BNSS and UAPA, engages with and potentially "tests the elasticity" of Article 21 of the Indian Constitution, which guarantees the right to life and personal liberty, including privacy. This highlights the ongoing legal and constitutional discourse surrounding the DPDP Act, indicating that its provisions are subject to judicial interpretation and scrutiny regarding fundamental rights, particularly concerning state exemptions. Businesses should note that the legal landscape around privacy is dynamic and constantly being evaluated.

5. Govt Reviews Global Child Online Safety Models, Highlights IT Act And DPDP Safeguards - News18

Source: Google News DPDP | Read Original →

The Indian government is actively reviewing global best practices for child online safety, reinforcing the safeguards already present in the IT Act and the DPDP Act. This initiative underscores the government's unwavering commitment to protecting children online and suggests that businesses can expect further detailed guidelines or rules pertaining to child data protection (Section 10). Businesses that develop products or services for children, or whose platforms are used by minors, must prioritize robust safety and privacy measures.

Stay Compliant

Not sure if your business meets DPDP standards? Start with a free check:

🔍 Run Your Free DPDP Audit →

16 questions. 60 seconds. Instant risk report.

---

Published by DPDP News, a Meridian Bridge Strategy initiative. For compliance consulting, book a free call.