India Data Law

Weekly updates

One entry each week · Last entry August 2026

Each entry states what happened and what it means. Each entry gives the whole point. A reader does not need the source document to understand it. Follow a source link to check a claim or to read the full text.

This page also produces a feed, which you can follow in a feed reader. The site collects no email addresses and sends no email.

12 Aug2026

The Government confirmed both compliance dates in Parliament.

The Minister of State for Electronics and Information Technology answered a written question in the Lok Sabha on 12 August 2026. The answer states that Consent Manager registration falls due by November 2026. It states that full compliance falls due by May 2027. Both dates are now on the parliamentary record. A reader can cite the answer instead of press commentary.

Reported by Tech Observer, 18 August 2026 — the answer itself is not yet published online
12 Aug2026

Common Service Centre operators may not collect or store citizen data.

The same parliamentary answer states that Village Level Entrepreneurs at Common Service Centres are not authorised to collect or store citizen data. The answer does not say whether they are Data Fiduciaries. India has more than 5.8 lakh Common Service Centres. The operators are not authorised to collect or store Aadhaar records, banking records or health records. On the section 2(i) test, an operator who decides nothing about the purpose or the means is not a Data Fiduciary. The obligations then sit with the government department whose service the centre delivers. That is a reading of the Act and not a statement by the Government. This is the first official statement about who handles data at a Common Service Centre.

Reported by Tech Observer, 18 August 2026
7 Aug2026

The Supreme Court gave the Union Government two weeks to reply on section 44(3).

The Supreme Court heard the challenges to the Act and the Rules on 7 August 2026. It gave the Union Government two weeks to file its reply. The Court referred the matter to a larger bench on 16 February 2026, on which date it also refused an interim stay. It has not announced the size of the larger bench. Section 44(3) substitutes section 8(1)(j) of the Right to Information Act, 2005 and came into force in November 2025. The Court did not stay the provision, so the amendment stays in force while the reference is heard.

Reported by LiveLaw, 16 February 2026, on the reference to a larger bench
1 Aug2026

The Data Protection Board still has no chairperson and no members.

The recruitment advertisement was published in Employment News on 6 June 2026 for a chairperson and four members. No appointment has been announced since. The Madhya Pradesh High Court at Indore directed a petitioner to file a representation before the Board in Parth Sharma v. Union of India. The Board cannot receive a complaint or pass an order until the Government appoints members.

Reported by LiveLaw, 1 August 2026