
While the Supreme Court upheld the right to privacy as a constitutional right in 2017, current legal instruments remain inadequate in addressing modern privacy challenges posed by rapid advancements in artificial intelligence.
The Digital Personal Data Protection Act was passed in 2023 with rules notified in November 2025 and phased implementation extending into 2027.
Previously, the Information Technology Act of 2000 and its 2011 Rules regulated sensitive personal data transfers, capping unauthorized disclosure penalties at three years imprisonment or a ₹5 lakh fine.