Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 01 SEPTEMBER 2026

Competition Law Updates August 2026

King, Stubb & Kasiva
King, Stubb & Kasiva
Contributor
King, Stubb & Kasiva

King, Stubb & Kasiva

King Stubb & Kasiva is few of the top corporate law firms in India with offices in Bengaluru,...

View firm profile
Explore more from King, Stubb & Kasiva

On 13 July 2026, the Competition Commission of India (CCI) imposed penalties exceeding ₹142 crore on HP India and several reselers under Section 27 of the Competition Act, 2002 (Competition Act) for cartelisation and bid rigging in the sale and supply of HP personal system products, including laptops, desktops, workstations and accessories (Computers Case), and ink and toner cartridges (Cartridges Case). The orders arose from lesser penalty applications filed by HP India under Section 46 of the Competition Act read with the CCI (Lesser Penalty) Regulations, 2009.

IndiaAntitrust/Competition Law
Rajesh Sivaswamy
Rajesh Sivaswamy
Aniket Ghosh
Aniket Ghosh
Aditya Bhattacharya
Aditya Bhattacharya
K. Vidya
K. Vidya
Navod Prasannan
Navod Prasannan
Author LinkedIn connections

CASE UPDATES

Competition Commission of India Slaps

₹142 Crore Penalty on HP India and Resellers for Cartelisation and Bid Rigging

On 13 July 2026, the Competition Commission of India (CCI) imposed penalties exceeding ₹142 crore on HP India and several resellers under Section 27 of the Competition Act, 2002 (Competition Act) for cartelisation and bid rigging in the sale and supply of HP personal system products, including laptops, desktops, workstations and accessories (Computers Case), and ink and toner cartridges (Cartridges Case). The orders arose from lesser penalty applications filed by HP India under Section 46 of the Competition Act read with the CCI (Lesser Penalty) Regulations, 2009.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

https://ksandk.com/

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

An Update On India’s Proposed Digital Competition Law

India’s proposed Digital Competition Law has evolved through several stages, from the 2022 Parliamentary Committee report and the 2024 Committee on Digital Competition Law’s draft Bill, through a 2025 government reconsideration, to renewed Parliamentary backing for an ex-ante framework in August 2026. Drawing on comparative experience from the EU, UK, and Japan, this article argues that legislative reform must be matched by a strengthened Competition Commission of India if ex-ante regulation is to work in practice.
IndiaAntitrust/Competition Law
Corporate Professionals - Advisors & Advocates
Corporate Professionals - Advisors & Advocates
Article

Keep The Key, Share The Gate: Competition Advocacy To States On Visa Application Services

Most visa applicants deal not with a consulate but with a single private provider they did not choose. Viewing visa facilitation through a competition lens, this article examines the concerns that exclusive contracts raise. While supporting outsourcing, it calls for advocacy with missions to open these services to more than one provider through better tender design.
IndiaAntitrust/Competition Law
Corporate Professionals - Advisors & Advocates
Corporate Professionals - Advisors & Advocates
Article

DPDP Data Breach Notification In India: Timelines, Requirements And Key Compliance Considerations

A personal data breach can create immediate legal, operational, and reputational consequences for an organisation. Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules), specific obligations have been prescribed for Data Fiduciaries following a personal data breach. While organisations may already have broader data protection and cybersecurity measures in place, breach notification requires a distinct and time-sensitive response. The DPDP framework requires communication both to affected Data Principals and to the Data Protection Board of India.
IndiaPrivacy
King, Stubb & Kasiva
King, Stubb & Kasiva
Article

Cross-Border Data Transfers Under India’s DPDP Act: Rules, Restrictions And Compliance Roadmap For 2027

India’s Digital Personal Data Protection Act, 2023 (DPDP Act) introduces a relatively permissive framework for the cross-border transfer of personal data from India. Unlike the European Union’s GDPR, which relies extensively on adequacy decisions and prescribed transfer safeguards, the DPDP framework adopts a negative-list approach: international transfers are generally permitted, subject to restrictions that may be notified by the Central Government.
IndiaPrivacy
King, Stubb & Kasiva
King, Stubb & Kasiva
Article

Data Retention And Deletion Under The DPDP Act: How Long Can Businesses Retain Personal Data In India?

India’s data protection framework has moved from legislation to implementation. With the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) now notified, organizations processing personal data in India need to reassess how long they retain personal data, why they retain it, and how they ultimately delete or anonymize it.
IndiaPrivacy
King, Stubb & Kasiva
King, Stubb & Kasiva
Article

CCPS In India: Why Compulsorily Convertible Preference Shares Remain Central To Venture Capital And M&A Transactions

Compulsorily Convertible Preference Shares (CCPS) remain one of the most widely used instruments for venture capital and private equity investments in Indian companies. Their appeal lies in the ability to combine equity classification with negotiated economic and governance protections. But CCPS are not governed by a single, standalone statutory framework. Their legal treatment is instead shaped by the Companies Act, FEMA and foreign investment rules, tax law, and, where applicable, SEBI regulations.
IndiaCorporate/Commercial Law
King, Stubb & Kasiva
King, Stubb & Kasiva
Article

What Happens To Existing SPDI Rules After Full DPDP Enforcement?

India’s data protection landscape is undergoing its most significant shift in over a decade. The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), have long formed the core of personal data protection obligations under the Information Technology Act, 2000 (“IT Act“) for body corporates handling sensitive personal data or information.
IndiaPrivacy
King, Stubb & Kasiva
King, Stubb & Kasiva
Article

DPDP Act And Rules 2025: The 2026 Compliance Milestones Businesses Can’t Afford To Miss

India’s data protection regime has moved well past the discussion stage. With the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) notified by the Ministry of Electronics and Information Technology (“MeitY”) on 13 November 2025, the Digital Personal Data Protection Act, 2023 (“DPDP Act”) now has a defined implementation roadmap, and 2026 is the year businesses should be using to prepare for substantive compliance.
IndiaPrivacy
King, Stubb & Kasiva
King, Stubb & Kasiva
Article

Banking & Finance Updates September 2026

In August 2026, the Reserve Bank of India (RBI) released the draft Reserve Bank of India (Interest Rates on Loans and Advances) Directions, 2026, proposing a comprehensive framework for the way regulated entities determine and apply interest rates on loans. While the Indian banking sector has long operated under a patchwork of institution specific instructions, the draft Directions seek to bring much-needed consistency to interest rate regulation across banks, cooperative banks, regional rural banks (RRBs), all-India financial institutions and NBFCs. If finalised in their present form, the Directions will come into effect from 1 April 2027.
IndiaFinance and Banking
King, Stubb & Kasiva
King, Stubb & Kasiva
Article

How Does The DPDP Act Regulate AI Training And Automated Decision-Making In India

The rapid adoption of artificial intelligence (“AI”) has brought data protection considerations into the design, training and deployment of AI systems. AI models may be trained using datasets containing names, images, text, identifiers, behavioural information or other data that can relate to identifiable individuals. AI systems may also process personal data when they are deployed for purposes such as recruitment, credit assessment, insurance, healthcare, customer profiling or content moderation.
IndiaPrivacy
King, Stubb & Kasiva
King, Stubb & Kasiva
Article

DPDP Act Compliance For Startups And MSMEs: A Minimum Viable Data Protection Framework

The Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) were notified on 13 November 2025, more than two years after the Digital Personal Data Protection Act, 2023 (“DPDP Act” or “Act”) received Presidential assent. The Government has adopted a phased implementation approach, with most of the substantive obligations under the Act and Rules becoming operative 18 months from the date of notification, i.e., on 13 May 2027.
IndiaPrivacy
King, Stubb & Kasiva
King, Stubb & Kasiva
Article

The Promotion And Regulation Of Online Gaming Act, 2025 And The Promotion And Regulation Of Online Gaming Rules, 2026

The Act, the Rules and the OGAI are therefore simultaneously operational. The prohibition provisions under Chapter III of the Act, the criminal penalties under Chapter V of the Act and the institutional framework under the Rules are all in effect. There is effectively no formal compliance window for core prohibitions and penalties; stakeholders should treat the regime as immediately operational and adjust business models without delay.
IndiaMedia, Telecoms, IT, Entertainment
King, Stubb & Kasiva
King, Stubb & Kasiva