Topic guides
Indian technology law is changing quickly: the DPDP Act and its Rules are phasing in, courts are deciding AI and deepfake cases, and regulators have issued new duties on incident reporting, labelling and dark patterns.
These guides explain what each development requires of a business and where the open questions are.
9 guides · newest first
Every UK firm that works with an offshore team in India asks: can we lawfully send them our client data? Yes, if done properly. But the rules changed in 2026. Here is how a UK GDPR transfer to India works after the Data (Use and Access) Act 2025.
Your systems are encrypted, customer data has been stolen, and a message demands payment in Bitcoin within 72 hours. Is it even legal for an Indian company to pay? Here is the legal position, the reporting duties and how cyber insurance responds.
If you collect a phone number on a WhatsApp order form or run an app with a sign-up page, India’s data protection law applies to you, whatever your size. Here is a practical checklist, the deadlines, the penalties and your remedies.
An AI tool parses her CV, scores her interview and ranks her below 300 others. Once hired, another tool tracks her keystrokes. Here is how the DPDP Act, the labour codes and the EU AI Act apply to AI in hiring and monitoring.
A few photos and a ten-second voice clip are now enough to make a convincing fake of anyone. Here is how personality rights work in India, what the courts and the IT Rules 2026 say about deepfakes, and what you can do if it happens to you.
Under the DPDP Act, anyone under 18 is a child, and processing their data comes with strict conditions. That puts AI chatbots, companion apps and edtech products squarely in the strictest part of the law.
On 24 July 2026 the Delhi High Court gave India its first answer on AI training and copyright. It is an interim order, ANI has appealed, and the question is far from settled. Here is what it means for publishers and AI developers.
On 13 November 2026, one specific part of India’s data protection law switches on: the registration of consent managers. It is not the DPDP compliance deadline most businesses face, but it changes the consent environment they will operate in.
English law offers no direct right to control your own face and voice, while Indian courts have built one through case law and are using it against deepfakes. Here is the UK gap, how Indian courts protect name, face and voice, and when a UK creator or brand can use them.
Related practice area
Technology & AI LawContracts, data protection and AI policies for products that handle other people’s data.
The Bar Council of India does not permit advocates to solicit work or advertise (Bar Council of India Rules, Part VI, Chapter II, Rule 36). This website exists only to share information about Halverton & Co. and its areas of practice.
By clicking “I agree”, you confirm that: