India: Privacy Protection

India's digital and AI regulatory framework has entered a decisive new phase. On 10 February 2026, the Ministry of Electronics and Information Technology (“MeitY”) notified the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026, introducing a comprehensive regulatory framework specifically addressing Synthetically Generated Information (“SGI”). These amendments, which took effect on 20 February 2026, mark India's response to the proliferation of deepfakes, AI-generated content, and other forms of synthetic media that can deceive users and cause significant harm.

India's digital governance landscape is undergoing significant transformation through proposed amendments to intermediary rules, enhanced telecommunications compliance frameworks, and stricter fintech data protection standards. Recent regulatory actions by MeitY, TRAI, and RBI signal a coordinated effort to strengthen platform accountability, combat unsolicited commercial communications, and safeguard consumer data across the financial sector.

Data localisation is no longer optional—it's a mandate under India's Digital Personal Data Protection Act (DPDP). But what does this mean for your business?