personal data
Valid Consent Under GDPR and PECR Must Be Assessed Objectively: UK Court of Appeal on Cookies and Targeted Direct Marketing
The law treats consent as something shown by a clear outward action, not by what a person is thinking internally. If there is no clear external indication of agreement, consent does not exist, regardless of the person’s actual state of mind, and the law does not allow inquiry into their inner thoughts.
The Tale of Two Laws — Does the DPDPA Dilute RTI Act?
by S. Chandrasekhar* and Aman Varma**
Digital Personal Data Protection Act, 2023: A Ready Reckoner for Employers
by Avik Biswas*, Supratim Chakraborty**, Sumantra Bose*** and Ivana Chatterjee****
Delhi HC disposes of petition seeking directions to ensure personal data collected by foreign travel companies is kept confidential; grants liberty to approach UOI
Petitioner submitted that at least three major foreign travel companies, which are running their operations in India, are partially or fully owned by foreign investors, leading to concerns regarding potential misuse of citizens’ data.
The Digital Personal Data Protection Act, 2023: Overview of the Impact on Data Fiduciaries and the Obligations Placed
by Varun Kumar† and Ishika Mittal††
Digital Personal Data Protection Bill, 2023 receives President’s assent
The object of the Act is to provide for the processing of digital personal data in a manner that recognises both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes and for matters connected therewith or incidental thereto.
Preparing for a Comprehensive Framework for Data Protection in India
by Prashant Phillips† and Sameer Avasarala††
Cite as: 2023 SCC OnLine Blog Exp 61
The Digital Personal Data Protection Bill, 2022
by Shiv Mehrotra†
Data Protection Bill, 2021 | Hits, Misses and the Way Forward for Businesses
by Supratim Chakraborty†
Cite as : 2022 SCC OnLine Blog Exp 32
An Overview of Healthtech Regulation in India [Part 2]
by Shantanu Mukherjee†
Cite as: 2021 SCC OnLine Blog Exp 85
Spain | AEPD fines Vodafone €56,000 for failure to verify customer identity
On September 14, 2021, the Spanish Data Protection Authority (‘AEPD’) fined Vodafone Spain, SAU €56,000 for processing the personal data of the
Saudi Arabia | Royal Court publishes new Personal Data Protection Law
On September 24, 2021, the National Centre for Documents and Archives Royal Court published the new Personal Data Protection Law (‘PDPL’), implemented