CICTL Faculty Head

by Anwita Mishra In the modern digital governance system, consent has become the moral and legal foundation for data protection. India's Digital Personal Data Protection Act, 2023 (DPDPA), reflects this approach by making consent the foundation for legal data processing. This sounds wonderful in principle. In reality, however, the issue is much more complicated. When users have few to no choices to begin with, consent starts to feel more like coercion and less like consent. The Illusion of...

by Khushi Chandak Introduction The Digital Personal Data Protection Act, 2023 came into force on November 13, 2025. This marked the country’s first comprehensive legislative framework for the personal data governance. The Act, 2023 has come at nascent stage where the data is being considered as an “asset.” This analogy is becoming more clearer with the intersection of Artificial Intelligence and the personal data. The urgency that arises with this intersection is that when the users provide...

by Aman Kumar Jha Introduction The Digital Personal Data Protection Act, 2023 (the “DPDP Act”) regards consent as the principal method of lawful processing of an individual’s data. Section 6(4) of the DPDP Act provides every Data Principal with the right to remove their consent at any time; Section 6(6) of the DPDP Act creates an obligation on the Data Fiduciary to stop processing and make sure their vendors stop processing as well. This appears to be a robust legal framework of protection;...