India: Cybersecurity

In this ‘Leading Questions’ section, Sidhant Dhingra and Shikher Upadhyay explain DPDP execution by outlining Data Fiduciary responsibilities, Significant Data Fiduciary duties, strict protections for children’s data, and rules for data erasure and retention.

The updates examine the Supreme Court’s approach to environmental restrictions in the Taj Trapezium Zone, the continued responsibility of developers to honour contractual possession commitments despite regulatory extensions, the availability of specific performance where contracts provide for a refund, and the evolving insolvency jurisprudence strengthening protections available to homebuyers.

India’s data protection regime has moved from legislation to implementation. The Digital Personal Data Protection Act, 2023 (“DPDP Act”) was enacted on 11 August 2023. The Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) were notified on 13 November 2025, together with a phased commencement framework. The result is a staggered implementation regime, with different provisions becoming operative on different dates.

GPS spoofing poses a sophisticated threat to Indian civil aviation, manipulating navigation systems through fake satellite signals that can mislead aircraft off course. As incidents increase near...

Cloud ERP is becoming central to how Gulf businesses manage finance, HR, and other core functions. For CFOs and CIOs, choosing an ERP now involves looking beyond features to assess how the system will handle sensitive financial and employee data, meet local requirements, and fit the broader security needs of the business.

The India–UK Comprehensive Economic and Trade Agreement (“CETA” or the “India–UK FTA”) is frequently discussed in the context of goods like automobiles, whisky, textiles and engineering products. Yet one of the sectors that stands to benefit most from the strengthening India-UK economic relationship is technology.

The rapid proliferation of advanced artificial intelligence tools capable of autonomously identifying and potentially exploiting cybersecurity vulnerabilities has compelled India’s financial regulators and market...

India's new online gaming framework introduces a game-by-game regulatory approach that requires each operator to independently register their titles with the Online Gaming Authority, even when offering identical gameplay. The rules establish broad discretionary powers for determining what constitutes prohibited real-money gaming versus permissible e-sports, while delegating substantial operational oversight to executive advisories that can reshape compliance obligations with minimal notice.

India's digital ecosystem is undergoing significant regulatory transformation as government agencies issue new guidelines on AI governance, cybersecurity, online gaming, and digital payments.