{"metadata":{"title":"DPDPA Enforcement Tracker — India Data Privacy Enforcement Actions","maintained_by":"KensaraAI","source":"https://kensara.in/dpdpa-enforcement-tracker","license":"https://creativecommons.org/licenses/by/4.0/","last_updated":"2026-09-19"},"dpdpa_board":[{"id":"IND-DPDPA-016","section":"dpdpa_board","date":"4 days ago","authority":"Cyril Amarchand blog","company":"abcdef","sector":"","violation_type":"","dpdpa_section":"","summary":"AUTO-DETECTED via SERPER from Cyril Amarchand blog: Whole Genome Sequencing in Healthcare - India Corporate Law. genetic counselling, and long-term data protection. data-specific safeguards for genomic information may be the need of the hour in the larger public interest.","penalty_amount":"","outcome":"","source_url":"https://corporate.cyrilamarchandblogs.com/2026/09/decoding-the-genome-encoding-the-law-whole-genome-sequencing-in-healthcare/","notes":"Source #42 (Cyril Amarchand blog, group E). Query: site:cyrilamarchandblogs.com data protection","source_id":42,"source_name":"Cyril Amarchand blog","source_group":"E","raw_excerpt":"genetic counselling, and long-term data protection. data-specific safeguards for genomic information may be the need of the hour in the larger public interest.","needs_review":false,"auto_detected":true,"extracted":false,"confidence":"high","detected_at":"2026-09-19T04:25:13.651363+00:00","verified_at":"2026-09-19T04:41:54.183+00:00","created_at":"2026-09-19T04:25:30.119055+00:00","updated_at":"2026-09-19T04:25:30.119055+00:00"},{"id":"IND-DPDPA-001","section":"dpdpa_board","date":"2025-01-03","authority":"MeitY","company":"Government of India","sector":"Government / Regulatory","violation_type":"Rule-making","dpdpa_section":"DPDP Rules 2025 (draft)","summary":"MeitY released the draft Digital Personal Data Protection Rules 2025 for public consultation.","penalty_amount":"N/A","outcome":"Rule drafted","source_url":"https://www.meity.gov.in/","notes":"SEED — sample verified entry.","source_id":1,"source_name":"MeitY","source_group":"A","raw_excerpt":"","needs_review":false,"auto_detected":false,"extracted":false,"confidence":"high","detected_at":"2025-01-03T00:00:00+00:00","verified_at":"2025-01-04T00:00:00+00:00","created_at":"2026-09-19T03:30:56.058448+00:00","updated_at":"2026-09-19T03:30:56.058448+00:00"},{"id":"IND-DPDPA-017","section":"dpdpa_board","date":"2 days ago","authority":"Cyril Amarchand blog","company":"abcd","sector":"","violation_type":"","dpdpa_section":"","summary":"AUTO-DETECTED via SERPER from Cyril Amarchand blog: Mirror, Mirror on the Wall: The Rise of Personalised Cosmetics .... This post examines the key legal considerations that arise when AI is used to design customised cosmetic regimens. Data Center Data Protection Digital Dispute","penalty_amount":"","outcome":"","source_url":"https://corporate.cyrilamarchandblogs.com/2026/09/mirror-mirror-on-the-wall-the-rise-of-personalised-cosmetics-regimens-in-india/","notes":"Source #42 (Cyril Amarchand blog, group E). Query: site:cyrilamarchandblogs.com data protection","source_id":42,"source_name":"Cyril Amarchand blog","source_group":"E","raw_excerpt":"This post examines the key legal considerations that arise when AI is used to design customised cosmetic regimens. Data Center Data Protection Digital Dispute","needs_review":false,"auto_detected":true,"extracted":false,"confidence":"high","detected_at":"2026-09-19T04:25:13.651416+00:00","verified_at":"2026-09-19T04:37:47.839+00:00","created_at":"2026-09-19T04:25:30.119055+00:00","updated_at":"2026-09-19T04:25:30.119055+00:00"}],"sectoral_regulators":[{"id":"IND-REG-001","section":"sectoral_regulators","date":"2024-07-19","authority":"CCI","company":"WhatsApp / Meta","sector":"Social Media / Tech","violation_type":"Abuse of dominance (data sharing)","dpdpa_section":"Competition Act, 2002","summary":"CCI imposed a penalty on Meta over the 2021 WhatsApp privacy policy and its data-sharing terms.","penalty_amount":"Rs 213.14 crore","outcome":"Fine imposed","source_url":"https://www.cci.gov.in/","notes":"SEED — sample verified entry.","source_id":8,"source_name":"CCI","source_group":"A","raw_excerpt":"","needs_review":false,"auto_detected":false,"extracted":false,"confidence":"high","detected_at":"2024-07-19T00:00:00+00:00","verified_at":"2024-07-20T00:00:00+00:00","created_at":"2026-09-19T03:30:56.058448+00:00","updated_at":"2026-09-19T03:30:56.058448+00:00"}],"cert_in_breach":[{"id":"IND-CERT-017","section":"cert_in_breach","date":"3 hours ag","authority":"TechCrunch","company":"abcd","sector":"","violation_type":"","dpdpa_section":"","summary":"AUTO-DETECTED via SERPER from TechCrunch: Exclusive | Page 52 of 58 - TechCrunch. Security Fertility tracker Glow fixes bug that exposed users' personal data Lorenzo. India stumped on how to cut PhonePe and Google dominance in payments … ...","penalty_amount":"","outcome":"","source_url":"https://techcrunch.com/tag/exclusive/page/52/","notes":"Source #36 (TechCrunch, group D). Query: site:techcrunch.com India data exposed","source_id":36,"source_name":"TechCrunch","source_group":"D","raw_excerpt":"Security Fertility tracker Glow fixes bug that exposed users' personal data Lorenzo. India stumped on how to cut PhonePe and Google dominance in payments … ...","needs_review":false,"auto_detected":true,"extracted":false,"confidence":"high","detected_at":"2026-09-19T04:25:03.309924+00:00","verified_at":"2026-09-19T04:38:38.066+00:00","created_at":"2026-09-19T04:25:30.119055+00:00","updated_at":"2026-09-19T04:25:30.119055+00:00"}],"courts_case_law":[],"international_benchmarks":[{"id":"INTL-GDPR-001","section":"international_benchmarks","date":"2023-05-22","authority":"DPC Ireland","company":"Meta Platforms","sector":"Social Media / Tech","violation_type":"Unlawful EU-US data transfers (Art. 46)","dpdpa_section":"GDPR Art. 46","summary":"The Irish DPC fined Meta EUR 1.2 billion over unlawful EU-US transfers. Benchmark for Indian IT/ITES firms.","penalty_amount":"EUR 1.2 billion","outcome":"Fine imposed","source_url":"https://www.edpb.europa.eu/","notes":"SEED — sample verified benchmark.","source_id":47,"source_name":"EDPB","source_group":"F","raw_excerpt":"","needs_review":false,"auto_detected":false,"extracted":false,"confidence":"high","detected_at":"2023-05-22T00:00:00+00:00","verified_at":"2023-05-23T00:00:00+00:00","created_at":"2026-09-19T03:30:56.058448+00:00","updated_at":"2026-09-19T03:30:56.058448+00:00"}],"statistics":{"total_dpdpa_board":3,"total_sectoral_regulators":1,"total_cert_in_breach":1,"total_courts_case_law":0,"total_international":1,"total_all_sections":5,"total_tracked":6,"by_sector":{"Unknown":3,"Government / Regulatory":1,"Social Media / Tech":1},"by_violation_type":{"Unknown":3,"Rule-making":1,"Abuse of dominance (data sharing)":1},"by_outcome":{"Unknown":3,"Law enacted / Rule drafted":1,"Fine imposed":1}},"last_updated":"2026-09-19"}