Recently, the Hon’ble High Court of Bombay [Nagpur Bench] in ABC v. State of Maharashtra upheld the ‘Right to be Forgotten’ principle, holding it as a crucial facet of the fundamental Right to Privacy under Article 21. This article discusses the legal nuances and practical implications of this judgment.
![Digital Personal Data Protection Toolkit [Part 6]: DPIAs](https://metaboard-assets.s3.ap-south-1.amazonaws.com/articles/article-1787332799153.webp)
An organisation’s Digital Personal Data Protection Toolkit remains incomplete without a carefully conducted Data Protection Impact Assessment [“DPIA”]. This article aims to assist organisations in navigating the regulatory landscape and ensuring compliance by explaining and exploring DPIAs.
![Right to be Forgotten Upheld: Analysing the Bombay High Court [Nagpur Bench] Decision on Digital Privacy](https://metaboard-assets.s3.ap-south-1.amazonaws.com/articles/article-1785853825175.webp)
Recently, the Hon’ble High Court of Bombay [Nagpur Bench] in ABC v. State of Maharashtra upheld the ‘Right to be Forgotten’ principle, holding it as a crucial facet of the fundamental Right to Privacy under Article 21. This article discusses the legal nuances and practical implications of this judgment.
The Reserve Bank of India has recently issued the comprehensive Draft Model Risk Management Guidance to govern the escalating deployment of AI and complex algorithms within the financial sector. This blog summarises and analyses these Draft Guidelines, exploring their key provisions, compliance requirements, and their expected implications for the future of digital banking.
![Digital Personal Data Protection Toolkit [Part 5]: Data Breach Notice](https://metaboard-assets.s3.ap-south-1.amazonaws.com/articles/article-1782929132377.webp)
As the Digital Personal Data Protection Act, 2023 and its 2025 Rules approach full enforcement by May 2027, proactive compliance has now become a strategic necessity for organisations. This article aims to assist organisations in navigating the regulatory landscape and ensuring compliance by building a robust Digital Personal Data Protection Toolkit, by exploring its foundational element: the Data Breach Notice.
![Digital Personal Data Protection Toolkit [Part 4]: Consent Notice](https://metaboard-assets.s3.ap-south-1.amazonaws.com/articles/article-1781531354040.webp)
An organisation’s Digital Personal Data Protection Toolkit remains incomplete without a meticulously drafted Consent Notice. Mandated by the DPDP Act, this Notice ensures that Personal Data is acquired through valid consent [i.e., consent that is informed, specific, and unambiguous]. This article explores the strategic role of the Consent Notice within an organisation’s data governance framework and outlines the essential requirements for drafting a compliant Notice.
![Digital Personal Data Protection Toolkit [Part 3]: Privacy Policies](https://metaboard-assets.s3.ap-south-1.amazonaws.com/articles/article-1780000045236.webp)
In our continuing exploration of the Digital Personal Data Protection Toolkit, we turn our focus to another pivotal compliance requirement: the Privacy Policy. This third part of our DPDP Toolkit series decodes the essential requirements for drafting a dynamic, accessible and effective Privacy Policy that both ensures legal compliance and builds consumer trust, forming an essential part of an organisation's data governance framework.
Recently, the Hon’ble High Court of Bombay in DBS Bank India Limited v. John Doe and Ors. cracked down on WhatsApp, holding that social media platforms must act quickly against misleading content. and that they can’t wait for court orders in cases where the innocent public can be misled. This article discusses the legal nuances and practical implications of this judgment.
![Digital Personal Data Protection Toolkit [Part 2]: Data Processing Agreements](https://metaboard-assets.s3.ap-south-1.amazonaws.com/articles/article-1777306369699.webp)
This article in our Digital Personal Data Protection Toolkit series examines the fundamental necessity and impact of the Data Processing Agreements ["DPAs"]. This review evaluates the critical role of DPAs in ensuring compliance with the legal and regulatory requirements, alongside its broader integration within an organisation's data governance framework.
![Digital Personal Data Protection Toolkit [Part 1]: RoPA](https://metaboard-assets.s3.ap-south-1.amazonaws.com/articles/article-1776360344282.webp)
As the Digital Personal Data Protection Act, 2023 and its 2025 Rules approach full enforcement by May 2027, proactive compliance has now become a strategic necessity for organisations. This article aims to assist organisations in navigating the regulatory landscape and ensuring compliance by building a robust Digital Personal Data Protection Toolkit, by exploring its foundational element: the Record of Processing Activities [“ROPA”]. This review breaks down the role of the ROPA in an organisation’s data governance framework.
In a recent development, MeitY has proposed amendments to the Information Technology [Intermediary Guidelines and Digital Media Ethics Code] Rules, 2021, representing a critical shift in India's digital governance. This blog summarises and analyses the legal and practical ramifications of these proposed amendments, specifically how these could reshape the compliance measures on intermediaries.