All Topics

Indian businesses face a complex regulatory landscape when responding to data breaches, requiring coordination between technical containment, legal assessment, and multiple reporting obligations. Understanding the parallel timelines under CERT-In's six-hour cyber incident reporting and the DPDP Act's breach notification requirements is critical for compliance and risk management.

The Ministry of Consumer Affairs, Food and Public Distribution, acting through the Department of Consumer Affairs, has notified the Consumer Protection (E-Commerce) (Amendment) Rules, 2026, vide Notification No. CG-DL-E-10092026-276125, published in the Gazette of India, Extraordinary, Part II, Section 3, Sub-section (i), dated 9 September 2026.

The Supreme Court, in the case of New India Assurance Co. Ltd. & Ors. vs. M/s Louis Dreyfus Commodities India Pvt. Ltd. (2026 INSC 876) ('New India Assurance vs. Louis Dreyfus'), has held that where an insurance policy covers turnover on a running annual basis, the insurer cannot be held liable for a loss that occurs after the insured's actual turnover has exceeded the turnover for which premium has already been paid, even where the policy itself is expressed as an annual turnover based cover.