This article examines some pitfalls around the processing of “voluntarily provided” personal data under India’s Digital Personal Data Protection Act, 2023 (“DPA”), and it is the second of a three-part series. The first, focussing on “employment purposes” can be accessed here.Continue Reading “Voluntary Provision” under the DPA: Too Good to be True?
Fashion has always been about expressing oneself, making retail therapy an important concept in modern society.
Enter, digital technology, or in this case, the combination of fashion and technology. This made even the most uninterested shopper indulge in some impulse buying or atleast ‘window’ shopping, often intrigued by the features on various shopping apps.Continue Reading Fashion-Tech: From Runways to Regulations
A patent grants the patentee exclusive rights, title, and interest in an invention. This creates a right in rem – a right to restrict a third party from making, using, offering for sale, selling, or in any manner commercializing the invention (as claimed in the patent)[1] for a period of 20 years[2]. In case of drugs, grant of patent, does not give the patent owner an automatic right to market the product. Such additional right in the form of a marketing approval/ license/ registration is granted by the concerned drug regulatory body acting under the auspices of the relevant legislation that regulates the import/ manufacture/ sale/ marketing of the drug in the relevant jurisdiction. Continue Reading Linking Patents to Pills: Unravelling the Patent Linkage Framework for Pharmaceutical Products in India
Indian regulators in recent times have shown a keen interest in monitoring the intersection between data, information technology, and cybersecurity with regulated entities—more so in relation to Non-Banking Financial Companies (“NBFCs”) and ‘fintechs’. With the expected enforcement of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), and the promulgation of its rules, it becomes imperative for NBFCs and fintechs to map their journey of compliance from legal and regulatory perspectives.Continue Reading FIG Paper (No. 34 – Data Law Series 5) Balancing Sectoral Regulation and DPDP Act Compliance by NBFCs & Fintechs
In the current landscape, Indian banks are bound by data protection obligations under the provisions and rules of the Information Technology Act, 2000, the Prevention of Money Laundering Act, 2002 and relevant directives of the Reserve Bank of India (“RBI”). As we await the enforcement of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the publishing of its rules (“DPDP Rules”), there will be a paradigm shift in the data processing protocols of banks amongst other financial entities.Continue Reading FIG Paper No. 28, Data Law Series 2: Implications of Digital Personal Data Protection Act, 2023 on Indian Banks
On August 11, 2023, India’s long-awaited general personal data protection legislation, the Digital Personal Data Protection Act, 2023 (“DPDPA”) was finally enacted.
Governing the world’s fifth largest economy and one of its fastest growing digital markets, the DPDPA will be of importance to a large number of international businesses that operate in India, rely on Indian service providers/group service companies for their operations, or are looking to enter Indian markets.Continue Reading India’s New Data Protection Law: How Does it Differ from GDPR and What Does that Mean for International Businesses?
The Ministry of Electronics and Information Technology (“MEITY”) has released a draft of the Digital Personal Data Protection Bill, 2022 (“The Bill”) for public consultations along with an explanatory note for each provision and the underlying principles that guide the drafting[1]. The public consultations are open till December 17, 2022[2]. This is Part II of our analysis on the Bill. Click here to read Part I of this postContinue Reading The Digital Personal Data Protection Bill, 2022 – Part II
In recent years, in line with global trends, India’s growth has been fuelled by technology and platform economy, with physical moving towards digital and ‘phygital’.Continue Reading FIG Paper (No. 10: Series -1) RBI’s New FinTech Department: Industry Implications & Future
In this digital age, it may not be out of place to say that data has replaced oil as the most valuable resource. The advancement of technology has led to the emergence of a new species of extortion, where ransom is sought in lieu of data, which is illegally assumed control over. This phenomenon is popularly known as a ransomware attack. A ransomware attack includes a malware that is introduced onto the host’s computer or mobile, thereby encrypting its data, with a subsequent demand for a ‘ransom’ for decryption of the same, to secure its release[i].Continue Reading Digital Age Warfare: Ransomware Attacks