DIGITAL PERSONAL DATA PROTECTION
Under attack, banks bolster cyber covers, opt for higher sum assured to protect against hits
For large financial institutions, the biggest impact often is the loss arising from systems remaining unavailable after an attack, rather than the immediate cost of the breach. Besides business interruption, ransomware, data theft, cyber extortion and third-party liabilities are among the key risks.
Delhi HC protects personality rights of actor Kriti Sanon
Kriti Sanon has gained interim relief from the Delhi High Court, which has ruled against the infringement of her personality rights. The court has ordered third parties to stop disseminating morphed or explicit content and impersonating her online. Additionally, online vendors must remove any merchandise that features her image or attributes. This legal action comes after her lawsuit, highlighting potential irreparable harm.
Digital recruitment is creating a new cybersecurity risk for employers
Online hiring has made it easier for companies to reach candidates across locations, but it has also exposed recruitment processes to identity fraud, manipulated assessments and misuse of personal information. HR teams are increasingly responsible for protecting the integrity and security of the hiring process.
How digital distribution shifts the balance of power towards the customer
The insurance sector grapples with pressing issues like mis-selling and customer complaints, which hinder the efficacy of policies. However, digital platforms offer improved transparency, enabling consumers to make well-informed choices about their coverage options. By comparing policies, customers not only save on premiums but also gain better insights into their coverage. Additionally, digital channels simplify grievance resolution, fostering easier interactions with insurers.
Kaspersky flags QR code payment scams as a key cyber risk for Indians travelling to Indonesia
As more Indian tourists move to Indonesia, Kaspersky's cybersecurity experts are sounding the alarm on rising online threats. They point out that travellers should be particularly careful about things like fake QR codes and phishing attacks, which are becoming more common. It's crucial for tourists to stay vigilant to protect themselves from these digital dangers.
From GST to e-invoicing: Closing the loop on Digital India
India has already built the rails. It is time to let the invoice travel on them.

Govt mulls giving Cert-In enforceable powers to mandate patching
Last month, two critical flaws in the PHP programming language, discovered with the help of AI, created worldwide panic as hackers targeted the vulnerabilities millions of times, and led to governments including the US, UK, France, Germany and Japan taking down public websites. PHP powers 69.3% of websites worldwide.

Zee 5 launches ZAP with Saptharushi to deliver privacy-first audience intelligence
Zee 5 has introduced the Zee 5 Audience Platform, called ZAP, to enhance advertising through targeted audience insights. The platform uses viewing behavior and consented signals from various sectors to optimize campaigns. It allows brands to create precise audience cohorts based on specific business objectives and viewing patterns.

Consent managers search for viable revenue model as registration nears
Consent managers are intended to help individuals manage, review and withdraw consent for the processing of their personal data, and they're required to be registered with the Data Protection Board of India (DPBI). A consent manager is data-blind, and processes metadata, consent artifacts, and cryptographic routing instructions.

MeitY unveils DEPA handbook to enable trusted data sharing for AI training
The Ministry of Electronics and Information Technology has launched a handbook on Data Empowerment and Protection Architecture. This handbook is designed to enhance collaboration on data for AI training while ensuring data control. IT Secretary S Krishnan emphasized the importance of responsible and secure data usage in India's AI ambitions. The handbook enables accountability and transparency by tracing data provenance throughout the training process.

Cathay Pacific reports personal data security incident involving Amadeus IT
Cathay Pacific Airways has reported a data security incident linked to a third-party service provider. The incident reportedly affected around 53,000 bookings associated with the airline, due to unauthorized access to Amadeus' systems. Personal information such as booking references, passenger names, and flight details were accessed during the breach. However, investigations continue, and there is no evidence of access to financial or payment information.

SC cracks down on banks, seeks mandatory payouts to cyber fraud victims
The Supreme Court has questioned the Reserve Bank of India's effectiveness in preventing digital fraud. Financial institutions must be held accountable for their role in cybercrime under new regulations. A mandatory liability clause is essential to ensure victims are compensated for losses. The court emphasizes that banks should enhance preventive measures against unusual transactions. The Attorney General mentioned that the RBI is working on regulations to address these issues.

Cyberattacks hit NBFCs; Pine Labs Q2 profit zooms
Cyber criminals are targetting smaller NBFCs with specialised AI toolkits. This and more in today’s ETtech Top 5.

Meesho Q2 loss narrows; Info Edge names Sanjeev Bikhchandani CEO
Happy Thursday! Meesho’s losses shrunk as revenue grew in the second quarter of FY27. This and more in today’s ETtech Morning Dispatch.

PHP scare sparks calls for urgent corp DPDP audits to plug all gaps
The incidents underline the need to identify gaps in companies’ security practices and clarify what constitutes reasonable safeguards before the law takes effect, they said. The DPDP Act is being implemented in phases, with a May 2027 deadline for full compliance obligations.

Government open to media suggestions on Digital Personal Data Protection Act, promises to uphold press freedom
The Government of India is willing to consider suggestions from news organisations about the Digital Personal Data Protection Act. Ashwini Vaishnaw stated that journalistic freedom is guaranteed by the Constitution and will not be affected. Concerns have been raised about the Act's provisions potentially infringing on press freedom and the Right to Information Act. The Digital News Publishers Association argues for exemptions for journalism activities within the DPDP Act.

Centre open to changes in DPDP law to protect press freedom, says Ashwini Vaishnaw
The Centre aims to amend the Digital Personal Data Protection law to address concerns raised by news publishers. Union Minister Ashwini Vaishnaw stated that the law does not limit press freedom. This response follows a Supreme Court notice regarding a petition from the Digital News Publishers Association and others. Publishers argue the lack of exemption for journalism could jeopardize investigative reporting and confidential sources.

Supreme Court issues notice to Centre on media groups' challenge to privacy law
A petition from the Digital News Publishers Association challenges provisions of India's digital privacy law. The law may restrict journalistic activities by requiring consent from individuals under investigation. News publishers argue that this could hinder the freedom of the press and expose confidential sources. Concerns regarding the potential penalties for non-compliance have also been raised by the petitioners.

Clock’s ticking for data protection, but the boardroom remains empty
Under the Digital Personal Data Protection (DPDP) Rules, 2025, the framework for registering consent managers with the DPBI is scheduled to start on November 13. But a government response to a Right to Information (RTI) application shows that the board spent not a single rupee on salaries, office expenses, rent or information and communication technology equipment as of September 30 this year.
Load More
