Indian government policies, regulations, and initiatives related to digital privacy.
6 articles
India Stack is brilliant engineering. It's also the most extensive personal data infrastructure any democracy has ever built. Holding both of those thoughts at once is where the interesting conversation starts.
Most people assume India's Data Protection Board will function like a court. It won't. Here's a thoughtful breakdown of how the DPBI actually operates, what it can do, and the quiet structural problems no one's talking about.
-- so you're telling me the government installed 15,000 cameras in my city, connected them to a centralized command center, and nobody asked whether residents were okay with being watched 24/7? Yeah. That's basically the situation in most of India's 100 smart cities.
India's cyber incident response agency wields enormous power over how companies report breaches, store logs, and cooperate with investigations — yet most citizens have never heard of it. Here's what CERT-In actually does, where it falls short, and why its 2022 directives changed the rules for everyone.
India's data localization story has taken more turns than most people realize. From early drafts that demanded strict local storage to the DPDP Act's more flexible approach, here's what actually changed and why it matters for your data.
India slashed its breach reporting window from 24 hours to 6. That's just one piece of the 2026 cybersecurity guidelines -- quarterly CII audits, AI governance rules, and a tiered compliance system round out the rest.
