Today's Headlines

1. DPDP Act implementation: No extension as startups face compliance deadline, says MeitY Secretary S. Krishnan - Fortune India

Source: Fortune India | Read Original → MeitY Secretary S. Krishnan has emphatically stated that there will be no extension for the DPDP Act compliance deadline, sending a clear message to India's startup community. This firm stance underscores the government's intent to move swiftly towards full enforcement, requiring all Data Fiduciaries to align their data processing practices with Section 8 — Data Fiduciary obligations without delay. Businesses must accelerate their preparedness, as the window for compliance is closing rapidly.

2. Consent in Form Surveillance in Substance A Constitutional Critique of Indias Data Protection Regime - lawstreet.co

Source: lawstreet.co | Read Original → Lawstreet.co has published a critical legal analysis of the DPDP Act, arguing that while it formally mandates consent, certain provisions may still facilitate surveillance, raising constitutional concerns. This critique delves into the fundamental principles of Section 6 — Processing of Personal Data based on consent, highlighting ongoing debates about the true effectiveness of the Act in safeguarding individual privacy against potential governmental or corporate overreach.

---

DPDP Impact Analysis

Today's headlines deliver a potent dual message for Indian businesses: urgency and ongoing scrutiny. The declaration from MeitY Secretary S. Krishnan that there will be "no extension" for DPDP Act compliance deadlines removes any lingering ambiguity. This signifies that the government is fully committed to the Act's implementation, and Data Fiduciaries must treat Section 8 (General Obligations of Data Fiduciary) as an immediate priority. Businesses, particularly resource-constrained startups, can no longer afford to delay their readiness, as the full notification of the Act and subsequent enforcement are now truly on the horizon.

This "no extension" stance puts considerable pressure on startups to rapidly adapt their data handling practices. They will need to conduct thorough data mapping, re-engineer consent acquisition and management systems, bolster data security measures, and establish robust grievance redressal mechanisms in line with the Act's requirements. Failure to comply could lead to significant financial penalties, with serious infractions under the DPDP Act potentially attracting fines of up to ₹250 Cr, emphasizing the high stakes involved for even the smallest entity.

Adding another layer of complexity is the constitutional critique highlighted by lawstreet.co, which questions the very essence of consent as enshrined in Section 6 of the DPDP Act. This analysis suggests that despite formal requirements for explicit consent, the framework might still contain elements that could be perceived as enabling surveillance, potentially challenging the Act's constitutional validity and its ability to robustly protect privacy rights. While businesses must comply with the current legal text, this ongoing debate signals that the interpretation and application of consent, and privacy rights in general, could continue to evolve through judicial review or future amendments.

Collectively, these developments underscore a dynamic regulatory landscape. Businesses must not only focus on achieving immediate, practical compliance with the existing provisions of the DPDP Act but also remain attuned to the broader legal and constitutional conversations shaping data protection in India. The government's firm stance demands swift and decisive action on compliance, while the critical legal analysis necessitates a thoughtful, principled approach to data privacy that extends beyond mere box-ticking. Forward-thinking organizations will view this as an opportunity to embed a strong data privacy culture, future-proofing their operations against an evolving regulatory environment.

---

Stay Compliant

Not sure if your business meets DPDP standards? Start with a free check:

🔍 Run Your Free DPDP Audit →

16 questions. 60 seconds. Instant risk report.

---

Published by DPDP News, a Meridian Bridge Strategy initiative. For compliance consulting, book a free call.