by Anwita Mishra In the modern digital governance system, consent has become the moral and legal foundation for data protection. India's Digital Personal Data Protection Act, 2023 (DPDPA), reflects this approach by making consent the foundation for legal data processing. This sounds wonderful in principle. In reality, however, the issue is much more complicated. When users have few to no choices to begin with, consent starts to feel more like coercion and less like consent. T

by Khushi Chandak Introduction The Digital Personal Data Protection Act, 2023 came into force on November 13, 2025. This marked the country’s first comprehensive legislative framework for the personal data governance. The Act, 2023 has come at nascent stage where the data is being considered as an “asset.” This analogy is becoming more clearer with the intersection of Artificial Intelligence and the personal data. The urgency that arises with this intersection is that when th

by Aman Kumar Jha Introduction The Digital Personal Data Protection Act, 2023 (the “DPDP Act”) regards consent as the principal method of lawful processing of an individual’s data. Section 6(4) of the DPDP Act provides every Data Principal with the right to remove their consent at any time; Section 6(6) of the DPDP Act creates an obligation on the Data Fiduciary to stop processing and make sure their vendors stop processing as well. This appears to be a robust legal framework

I. Introduction On 5th November 2025, UNESCO adopted the world’s first standard on neurotechnology ethics. It defined neural data as qualitative and quantitative information about the structure, activity, and function of the nervous system gathered through neurotechnology. This data consists of direct measures, such as electroencephalography signals, as well as indirect indicators that help infer mental states, including eye tracking, voice analysis, typing patterns, and phys