382 results found

Cybersecurity regulation in India has, until now, largely spoken to the entity that suffers the breach. The 2022 CERT-In Directions issued under Section 70B of the Information Technology Act, 2000 fixed a six-hour reporting clock on the organisation that detects an incident. The new Guidelines flip the lens onto the entity upstream of that breach, the OEM or technology provider that built the product in the first place. For the first time, vendors supplying software, firmware, cloud platforms, or APIs into India carry direct, time-bound, and independently verifiable obligations of their own and not obligations that are merely passed through a customer contract, but obligations CERT-In itself may enforce.

We are delighted to share this week's AKP Corporate & Compliance Weekly Digest.

In the year 2018, the Draft Policy is suggesting a plan similar to what was implemented, and failed, for the "physical" economy from 1950s right until 1990.

A Kenyan journalist, Japhet Ndubi, in July 2024 lost his phone and was unable to locate it. He got a new phone, replaced his SIM card, and continued with his life.

For most technology vendors, cybersecurity has been a promise made to a customer, set out in a statement of work and enforced, if at all, through the contract. For vendors supplying India's power sector, that is changing. The Central Electricity Authority (Cyber Security in Power Sector) Regulations, 2026, notified on 31 July 2026 under the Electricity Act, 2003, impose obligations directly on vendors, alongside a far more demanding set of requirements for the power-sector entities they serve. Most of these provisions come into force on 1 April 2027.

The 2025 Rules mark a significant step forward in India's approach to telecom cybersecurity, demonstrating a clearer regulatory intent and a more structured compliance architecture...

Cybersecurity covers common issues in cybersecurity laws and regulations, including criminal activity, applicable laws, specific sectors, corporate governance, litigation, insurance, employees, and investigatory and police powers.

The incentivization for digitization coupled with pandemic-imposed necessity for adoption of digital tools has led to a manifold increase in quantity of data generation from India. A comprehensive...

The following acts constitute offences when conducted fraudulently or dishonestly and without the permission of the owner/person in charge of the computer:

India's new online gaming framework introduces a game-by-game regulatory approach that requires each operator to independently register their titles with the Online Gaming Authority, even when offering identical gameplay. The rules establish broad discretionary powers for determining what constitutes prohibited real-money gaming versus permissible e-sports, while delegating substantial operational oversight to executive advisories that can reshape compliance obligations with minimal notice.

In October 2025, a communication platform with over 200 million active users worldwide disclosed a significant data breach that originated not from its own systems, but from a compromised third-party customer service provider

At the heart of India's digital journey lie three interconnected pillars shaping its future. AI Innovation → Encouraging growth of AI technologies through missions like IndiaAI Mission...

In the contemporary business landscape, where data acts as the backbone of decision-making, the significance of robust data governance cannot be overstated.

The 8th (Eighth) Central Pay Commission has opened a structured online mechanism to receive representations/memorandum from associations/unions of employees...

India's insurance sector has grown rapidly over the past two decades, with various reports indicating a compounded annual growth rate of approximately 17% during this period

In the digital age, data migration is a critical operation for businesses looking to stay agile and competitive.

India's position in the global services market has seen a remarkable transformation during the last ten years.

The Ministry of Electronics and Information Technology ("MeitY") released the India AI Governance Guidelines on November 5, 2025 ("Guidelines")...