Founder & Chief Editor
Rajesh Kumar is a cybersecurity expert with over 12 years of experience in digital privacy and data protection. He has worked with CERT-In and various Indian enterprises to strengthen their data security practices. He founded PrivacyTechIndia to make privacy awareness accessible to every Indian.
India Stack is brilliant engineering. It's also the most extensive personal data infrastructure any democracy has ever built. Holding both of those thoughts at once is where the interesting conversation starts.
Your smart speaker is always listening. Your Wi-Fi camera is phoning home to servers you've never heard of. Indian households are filling up with connected gadgets and barely anyone's asking what data leaves the house.
India's cyber insurance market wants you to believe it's mature. It's not. Here's a dry-eyed look at what these policies actually cover, what they exclude, and why you'll probably still need one anyway.
February 2026 was a busy month for privacy in India — a fintech breach exposed 2.3 million records, the Data Protection Board got its full bench, and UPI fraud numbers got worse. Here's what happened.
Your fingerprints can't be reset like a password. India holds biometric data on 1.4 billion people through Aadhaar alone, and the legal protections around that data remain thinner than most citizens realize.
Most people assume AI in India is still experimental, mostly chatbots and Netflix suggestions. They're wrong. Indian companies are already using machine learning to decide your loan eligibility, set the prices you see online, and scan your face in public. Here's what that means for your data.
Practo knows your prescriptions. 1mg knows your lab results. PharmEasy knows what you're treating. Apollo 247 has your vitals. And the Ayushman Bharat Health ID might soon tie it all together. Who else is looking at your medical records?
Only 38% of Indian internet users could identify a phishing email in a recent nationwide survey. On Safer Internet Day 2026, that number should trouble us all -- and it should also tell us exactly where to start.
Someone recently asked me: 'WhatsApp says my messages are encrypted. Does that mean nobody can read them? Not even WhatsApp?' The answer is surprisingly interesting, and it affects every single message you send.
India's cyber incident response agency wields enormous power over how companies report breaches, store logs, and cooperate with investigations — yet most citizens have never heard of it. Here's what CERT-In actually does, where it falls short, and why its 2022 directives changed the rules for everyone.
Over 1.8 billion records belonging to Indian citizens were exposed between 2018 and 2025. Here's a year-by-year breakdown of the biggest data breaches, what went wrong each time, and what ordinary people can actually do about it.
I deleted my Flipkart app for a month. When I reinstalled it, the app already knew what I'd been browsing on Myntra. Here's the uncomfortable truth about how Indian tech companies follow you across the internet.
Fourteen billion UPI transactions a month and people are still entering their PIN to 'receive' money. Here's what nobody bothers to explain about collect request scams, fake helplines, QR code tricks, and SIM swaps — plus what actually works when you've already been hit.
So I was chatting with a friend about why his Aadhaar got misused, and it hit me -- most of us in India still don't get why our data matters until something goes wrong.
