DPDP Act 2023

In the news

• Supreme Court issues notice on news publishers' challenge to the data protection law 28 October 2026 · Indian Express

  Must a reporter seek consent before naming the subject of an investigation? Publishers say the DPDP Act demands it.

• Transport Ministry seeks CERT-In audit of VAHAN, SARATHI portals after data sale reports 25 October 2026 · The Hindu

  Your name, address and phone number for ₹5 or less: how did India's vehicle database leak into apps?

• SBI finds 3,897 customer records on the dark web; DPDP breach duties start only in 2027 22 October 2026 · The Hindu

  India's largest bank told the markets about a leak. Why is it not yet legally bound to tell its customers?

• Supreme Court asks Centre to frame rules to stop social media firms signing up minors 29 September 2026 · Indian Express

  If a minor cannot sign a contract, how is a 13-year-old agreeing to a platform's terms of service?

Key facts

• On 27 October 2026 the Supreme Court issued notice on the Digital News Publishers Association's challenge to the DPDP Act, 2023 and DPDP Rules, 2025, returnable on 17 November. (28 October 2026)
• The core grievance is the absence of a journalistic exemption; Section 17(2) exempts research, archiving and statistical processing but not journalism. (28 October 2026)
• MoRTH asked CERT-In for a forensic audit of the VAHAN, SARATHI, e-Challan and PUCC portals after reports of vehicle-owner data being sold online. (25 October 2026)
• An NIC RTI reply showed 25,314 credentials issued to private entities and about 1.708 crore queries from January 2024 to September 2026. (25 October 2026)
• SBI disclosed on 21 October 2026 that 3,897 customer records with personal data were found among about 3.75 lakh records leaked on the dark web. (22 October 2026)
• The alerts came on 16 October 2026 from SBI's threat intelligence provider, the Defence Cyber Agency and CERT-In. (22 October 2026)
• On 28 September 2026 the Supreme Court, in Just Rights for Children Alliance v Union of India, asked the Centre to frame statutory rules barring social media firms from enrolling minors. (29 September 2026)
• The reasoning: under Section 11 of the Indian Contract Act, 1872 a minor cannot contract, and the Majority Act, 1875 fixes majority at 18. (29 September 2026)

Previous-year questions

1. 2025 · GS2 · 15 marks The National Commission for Protection of Child Rights has to address the challenges faced by children in the digital era. Examine the existing policies and suggest measures the Commission can initiate to tackle the…
2. 2024 · GS3 · 10 marks Describe the context and salient features of the Digital Personal Data Protection Act, 2023.
3. 2024 · GS3 · 15 marks Social media and encrypting messaging services pose a serious security challenge. What measures have been adopted at various levels to address the security implications of social media? Also suggest any other remedies…
4. 2022 · GS3 · 15 marks What are the different elements of cyber security? Keeping in view the challenges in cyber security, examine the extent to which India has successfully developed a comprehensive National Cyber Security Strategy.
5. 2018 · GS4 · 10 marks The Right to Information Act is not all about citizens' empowerment alone, it essentially redefines the concept of accountability. Discuss.
6. 2017 · GS2 · 15 marks Examine the scope of Fundamental Rights in the light of the latest judgement of the Supreme Court on Right to Privacy.
7. 2024 · Prelims Under which of the following Articles of the Constitution of India, has the Supreme Court of India placed the Right to Privacy? (a) Article 15 (b) Article 16 (c) Article 19 (d) Article 21