Open Access
Authors: PARI KALLA
Registration ID: 107180 | Published Paper ID: WBL7180
Year: Oct- 2026 | Volume: 4 | Issue: 2
Approved ISSN: 2581-8503 | Country: Delhi, India
Page No.: 889-917
Vol. Volume 4
Issue VOLUME 4 ISSUE 2
October 2026
Pages
889
– 917
[1] Samuel D Warren and Louis D Brandeis, ‘The Right to Privacy’ (1890) 4 Harvard Law Review 193.[2] Alan F Westin, Privacy and Freedom (Atheneum 1967).[3] Universal Declaration of Human Rights (adopted 10 December 1948) UNGA Res 217 A(III), art 12; International Covenant on Civil and Political Rights (adopted 16 December 1966, entered into force 23 March 1976) 999 UNTS 171, art 17.[4] Council of Europe, Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No 108, opened for signature 28 January 1981, entered into force 1 October 1985).[5] Paul M Schwartz, ‘Global Data Privacy: The EU Way’ (2019) 94 NYU Law Review 771.[6] Paul M Schwartz and Karl-Nikolaus Peifer, ‘Transatlantic Data Privacy Law’ (2017) 106 Georgetown Law Journal 115.[7] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) [2016] OJ L119/1.[8] Graham Greenleaf, ‘Now 157 Countries: Twelve Data Privacy Laws in 2021/22’ (2022) 176 Privacy Laws & Business International Report 1.[9] Justice K.S. Puttaswamy (Retd.) and Anr. v. Union of India and Ors. (2017) 10 SCC 1 (Supreme Court of India).[10] ibid [267]–[270] (DY Chandrachud J).[11] Information Technology Act 2000 (India), ss 43A, 72A; Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, SI 2011/No G.S.R. 313(E).[12] Committee of Experts on a Data Protection Framework for India (Chair: Justice B.N. Srikrishna), A Free and Fair Digital Economy: Protecting Privacy, Empowering Indians (Ministry of Electronics and Information Technology, 2018).[13] A Bhardwaj, ‘Data Protection and Privacy Laws: Comparison Between GDPR and India’s Digital Personal Data Protection Act’ (2025) 3(2) Indian Journal of Law 17.[14] Latham & Watkins LLP, India’s Digital Personal Data Protection Act, 2023 vs. the GDPR: A Comparison (Client Alert, 2024) <https://www.lw.com/admin/upload/SiteAttachments/Indias-Digital-Personal-Data-Protection-Act-2023-vs-the-GDPR-A-Comparison.pdf> accessed 1 June 2026.[15] Vibushan Sivapatham and Meghana Srinivasan, ‘Bridging the Gap: Assessing India’s Digital Personal Data Protection Act in Light of the EU GDPR’ (2025) SN Computer Science (Springer) <https://doi.org/10.1007/s42979-025-04269-7> accessed 1 June 2026.[16] Abdullah Zubair Motiwala, ‘A Jurisprudential Analysis of the DPDP Rules 2025 and the Evolution of Data Privacy Laws in India’ (30 April 2025) SSRN Working Paper <https://ssrn.com/abstract=5335388> accessed 1 June 2026.[17] European Data Protection Supervisor, Annual Report 2024 (EDPS 2025); Observer Research Foundation, ‘The Adequacy Dilemma: India’s DPDPA and the GDPR’ (18 June 2025) <https://www.orfonline.org/expert-speak/the-adequacy-dilemma-india-s-dpdpa-and-the-gdpr> accessed 1 June 2026.[18] Indian Journal of Law and Technology, ‘Jurisdictional Challenges to Personal Data Transfers into India: Does the Digital Personal Data Protection Act, 2023 Ensure an Adequate Level of Protection?’ (2024) <https://www.ijlt.in/post/jurisdictional-challenges-to-personal-data-transfers-into-india-does-the-digital-personal-data-prot> accessed 1 June 2026.[19] A Comparative Legal Study of the GDPR and India’s Digital Personal Data Protection Act, RJ Wave, https://www.rjwave.org/jaafr/papers/JAAFR2601594.pdf; Cross-Border Data Transfers: Reconciling Indian Law with Global Privacy Regimes, DPO India, https://www.dpo-india.com/Blogs/cross-border-data-transfers/[20] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation), 2016 O.J. (L 119) 1[21] Digital Personal Data Protection Act, No. 22 of 2023, Gazette of India, Aug. 11, 2023.[22] India’s Digital Personal Data Protection Act, 2023 (DPDP Act) vs GDPR, Securiti, https://securiti.ai/india-digital-personal-data-protection-act-vs-gdpr/[23] India’s Digital Personal Data Protection Act 2023 vs. the GDPR: A Comparison, Latham & Watkins, https://www.lw.com/admin/upload/SiteAttachments/Indias-Digital-Personal-Data-Protection-Act-2023-vs-the-GDPR-A-Comparison.pdf[24] Key Difference Between India’s DPDP Act and EU’s GDPR You Should Know, Complinity, https://complinity.com/blog/compliance/key-difference-between-indias-dpdp-act-and-eus-gdpr-you-should-know/[25] India’s New Data Privacy Rules Are Here: 8 Steps for Businesses as Key Compliance Deadlines Approach, Fisher Phillips[26] India’s Digital Personal Data Protection Act 2023 vs. the GDPR: A Comparison, Latham & Watkins[27] GDPR, art. 9[28] GDPR vs DPDP Act: Key Differences Explained, DPDP Consultants[29] GDPR, art. 3; Cross-Border Data Transfers: Reconciling Indian Law with Global Privacy Regimes, DPO India[30] DPDPA’s Global Reach: Cross-Border Data, AI Impact, and International Alignment, TrustArc[31] GDPR, art. 28[32] DPDP Act Non-Compliance Penalties: What You Must Know, VISTA InfoSec[33] GDPR, art. 6[34] GDPR, art. 6(1)(f)[35] Comparative Analysis of the Digital Personal Data Protection Act of India 2023 and GDPR, Pen Acclaims[36] DPDP Act Exemptions Explained, Consentin[37] DPDP Act vs GDPR: Key Differences for Indian Companies, TCSA[38] Digital Personal Data Protection Act, 2023, § 6; FAQs on the Digital Personal Data Protection Act and Rules, CMS INDUSLAW[39] The Right to (Pry)-vacy: Understanding India’s Dystopian Data Protection Legislation, NYU Journal of International Law & Politics[40] DPDP Rules 2025 Notified by MeitY: Complete Guide, EY India[41] DPDP Act vs GDPR: Key Differences for Indian Companies, TCSA.[42] India’s New Data Privacy Rules Are Here: 8 Steps for Businesses as Key Compliance Deadlines Approach, Fisher Phillips[43] GDPR vs DPDP Act: Key Differences Explained, DPDP Consultants[44] GDPR arts. 15–17; Digital Personal Data Protection Act, 2023, §§ 11–12[45] GDPR art. 20[46] GDPR art. 21[47] GDPR art. 22; Regulating Innovation: The IT Act 2000 and DPDP Act 2023 in the Age of AI and Data, JETIR[48] Digital Personal Data Protection Act, 2023, § 13[49] Digital Personal Data Protection Act, 2023, § 14[50] Digital Personal Data Protection Rules, 2025; India’s DPDP Timeline: Critical Compliance Deadlines for 2026–27, India Briefing[51] DPDP Rules 2025 Notified by MeitY: Complete Guide, EY India[52] Digital Personal Data Protection Rules, 2025[53] DPDP Rules 2025 Notified by MeitY: Complete Guide, EY India[54] The Practicalities of Implementing India’s Digital Personal Data Protection Act, International Bar Association[55] DPDP Rules 2025 Notified by MeitY: Complete Guide, EY India[56] India’s DPDP Rules 2025: Leading Digital Privacy Compliance, Deloitte[57] Decrypting India’s Data Protection Regime: Principles of Data Protection, Clyde & Co[58] Digital Personal Data Protection Act, 2023, § 2(f)[59] DPDP Rules 2025: The Complete Implementation Roadmap, TCSA[60] GDPR art. 83; Fines/Penalties, GDPR Info[61] DPDP Act Non-Compliance Penalties: What You Must Know, VISTA InfoSec[62] Digital Personal Data Protection Act, 2023, § 33; DPDP Act Non-Compliance Penalties: What You Must Know, VISTA InfoSec[63] DPDPA’s Global Reach: Cross-Border Data, AI Impact, and International Alignment, TrustArc; DPDP Act Non-Compliance Penalties: What You Must Know, VISTA InfoSec[64] Regulation (EU) 2016/679, art. 83[65] Regulation (EU) 2016/679, art. 83(4)–(5)[66] Digital Personal Data Protection Act, 2023, § 33[67] DPDP Act Non-Compliance Penalties: What You Must Know, VISTA InfoSec[68] Digital Personal Data Protection Act, 2023, § 33(2)[69] Digital Personal Data Protection Act, 2023, § 33[70] DPDPA’s Global Reach: Cross-Border Data, AI Impact, and International Alignment, TrustArc[71] Digital Personal Data Protection Act, 2023, §§ 27–39[72] Regulation (EU) 2016/679, art. 83(5)[73] Digital Personal Data Protection Rules, 2025; DPDP Rules 2025 Notified by MeitY: Complete Guide, EY India[74] Regulation (EU) 2016/679, art. 33[75] Digital Personal Data Protection Act, 2023, § 17[76] Digital Personal Data Protection Act, 2023, § 17(1)[77] Digital Personal Data Protection Act, 2023, § 17(2)[78] Digital Personal Data Protection Act, 2023, § 17(2)(a)[79] Digital Personal Data Protection Act, 2023, § 17(1)(c)[80] Digital Personal Data Protection Act, 2023, § 17(1)(c)[81] Constitutionality of the Digital Personal Data Protection Act, 2023, Supreme Court Observer; Regulating Innovation: The IT Act 2000 and DPDP Act 2023 in the Age of AI and Data, JETIR[82] Constitution of India art. 32; Constitutionality of the Digital Personal Data Protection Act, 2023, Supreme Court Observer[83] Constitution of India art. 14; K.S. Puttaswamy v. Union of India, (2017) 10 SCC 1[84] Right to Information Act, No. 22 of 2005, § 8(1)(j)[85] Right to Information Act, 2005, § 8(1)(j) (prior to amendment)[86] Digital Personal Data Protection Act, 2023, § 44(3)[87] The Data Protection Act Is Critical for Privacy, but Sweeping Provisions Threaten Right to Information, Article 14[88] Data Protection Act vs the Right to Information Act, Shankar IAS Parliament[89] Impact of the Digital Personal Data Protection Act, 2023 on Third-Party Information under the Right to Information Act, 2005, IJFMR[90] Constitutionality of the Digital Personal Data Protection Act, 2023, Supreme Court Observer[91] India’s New Data Privacy Rules Are Here, Fisher Phillips; Are the SPDI Rules Still in Force After DPDP Act 2023, Opsio[92] Information Technology Act, 2000, § 43A[93] Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.[94] Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, Rule 8[95] DPDP Rules 2025 Notified by MeitY: Complete Guide, EY India