Data Protection


Data is the new currency in today’s digital economy. The overarching potential of data and its crucial role as a corporate asset cannot be emphasised enough. This is especially pertinent for service providers, for whom the advent, development and trading of ‘big data’ has revolutionized targeted delivery of goods and services. There is a clear expectation that important data be available 24 hours a day, 7 days a week, 365 days a year. This brings with it the need for a robust data privacy & protection strategy.

Data privacy is critical not only for the sectors which actively deal with data, including e-commerce companies, social networks, IT outsourcing units but could also greatly impact other businesses in sectors including hotels and hospitality, insurance, B2C sales, telecom, life sciences, etc. Additionally, even the entities which seek investment from offshore individual investors need to be mindful of the data protection norms while collecting and storing KYC and other information from such investors.

Several questions beg consideration though: who does this data belong to? Who can access it? What are the limits, if any, on the exploitation of this data? As in all things in technology, the law is playing catch up. Jurists around the world are struggling to marry traditional concepts of the law and the absurdly invasive times we find ourselves in. This position is further complicated by several governments demanding and seeking access to data from its citizens and corporates. On the other hand, what are the limits to privacy? Can data be demanded for the availing of basic services, travel or even government benefits? Does national security override all concerns of privacy?

Aided with a team that has been closely following developments in this sector, ELP’s Data Protection and Privacy team aims to guide its clients through this complex and nascent paradigm.


Advisory Services

  • Implementation of a strategic plan for data protection program based on the industry
  • Transfer of data in cross-border mergers and acquisitions
  • Data breach scenarios and other data security concerns
  • Consumer rights and consumer protection regime
  • Issues surrounding treatment of employee data


  • Reviewing the existing privacy policies and procedures to identify possible compliance gaps; streamlining these with applicable legal requirements
  • Data localisation for cross-jurisdiction compliance

Regulatory Support

  • Responding to potential allegations of non-compliance from regulatory authorities
  • Data disclosure requests from investigation agencies
  • Making representations to regulatory authorities to bring forward the views of the stakeholders

Contentious Matters and Litigation Support

  • Complaints from users regarding data and security breaches
  • Objections raised and challenges to the privacy or security policies implemented.
  • Data security and legal compliance investigations.


The data dilemma: Companies find India's privacy law a tricky maze to ...

16 Oct 2023 | Read More

Decrypting the Digital Protection Bill 2023

9 Aug 2023 | Read More

Fintechs fear increase in compliance burden after Delhi HC’s order on PayPal

9 Aug 2023 | Read More

EU may negatively assess India's data protection Bill: Experts

24 May 2024 | Read More

Overview of the Digital Personal Data Protection (DPDP) Bill, 2023

4 Aug 2023 | Read More

The DPDP Bill: From responding to responsibility

10 Jul 2023 | Read More

Digital India Bill draft soon: What to expect from India’s overhaul of ...

29 May 2023 | Read More

NASSCOM AI regulation, spam calls, markets, cyclones categories

13 Jun 2023 | Read More

Who protects the data you share while shopping?

6 Jun 2023 | Read More

Disrupting the delivery game

24 May 2024 | Read More

New IT rules on fact checking are troublesome

14 Apr 2023 | Read More

Govt's proposal to remove content that PIB marks fake leaves scope for ...

20 Jan 2023 | Read More

How The Data Protection Bill Enables Govt Surveillance and Misuse of Personal ...

24 May 2024 | Read More

Overview of the Digital Personal Data Protection (DPDP) Bill, 2022

25 Nov 2022 | Read More

ELP Podcast Series – Key Takeaways: Digital Personal Data Protection Bill, 2022

25 Nov 2022 | Read More

Now, customer data privacy concerns surround Ola

26 Apr 2022 | Read More

Union Budget - An Analysis by Economic Laws Practice

1 Feb 2022 | Read More

ELP Knowledge Series – Part 2 of 2021

15 Sep 2021 | Read More

Bombay HC’s interim order on IT Rules provides relief to digital media

16 Aug 2021 | Read More

ELP - Knowledge Series – Part 1 of 2021

27 Apr 2021 | Read More

Union Budget 2021: An Analysis

2 Feb 2021 | Read More

Union Budget 2020: An Analysis

2 Feb 2020 | Read More

ELP - Knowledge Series - India Update - Part 4 of 2019

22 Jan 2020 | Read More

ELP - Knowledge Series - India Update - Part 3 of 2019

3 Sep 2019 | Read More

ELP Knowledge Series - India Update Part 2 of 2019

7 May 2019 | Read More

WhatsApp users get more control over group chats

4 Apr 2019 | Read More

Analysing India’s draft E-Commerce policy

25 Mar 2019 | Read More

Regulatory Update – Draft National e-commerce policy

26 Feb 2019 | Read More

ELP Knowledge Series - India Update Part 1 of 2019

19 Feb 2019 | Read More

Budget 2019: Judicial Reform Is What This Economy Needs Now

2 Feb 2019 | Read More

Interim Union Budget 2019 - An Analysis

1 Feb 2019 | Read More

European Commission comments on Personal Data Protection Bill, 2018

27 Nov 2018 | Read More

Data Privacy and Protection in India : An Update

13 Nov 2018 | Read More

ELP Knowledge Series - India Update Part 2 of 2018

10 Sep 2018 | Read More

Data Privacy: How Secure is Secure?

8 Jul 2018 | Read More

Union Budget, 2018

18 Jan 2018 | Read More

Data Protection & Privacy Issues in India

8 Sep 2017 | Read More

ELP Knowledge Series - India Update Part 1 of 2018

14 Jun 2018 | Read More

Data Privacy

10 Aug 2018 | Read More