A New Era for Digital Privacy
The Digital Privacy Bill 2026, tabled in Parliament this week, represents the most comprehensive attempt yet to regulate how companies collect, store, and use personal data in India.
The bill introduces data localization requirements for sensitive personal data, mandatory breach notifications within 72 hours, and penalties of up to 4% of global revenue for non-compliance — mirroring the EU's GDPR framework.
Key Provisions
- Mandatory data localization for financial and health data
- Right to data portability and deletion
- Algorithmic transparency requirements for AI decision-making
- Children's data protection with parental consent mechanisms
- Cross-border data transfer restrictions
"This bill strikes a balance between protecting citizen privacy and enabling innovation. It's a landmark moment for digital governance in India." — IT Minister's statement
