Blog

An analysis of RBI’s card directions that restrict fintech’s access to card transaction data and their interplay with RBI’s outsourcing guidelines.  In April 2022, RBI notified the directions on Credit and Debit Cards. In these directions, it asked co-branding partners to keep their hands off card transaction data. The RBI has, this time, gone straight for the fintechRead more

This article explores how telematics insurance can make motor vehicle insurance more efficient and suggests risk-based data privacy protections. While taking an insurance policy in 1933, Dunn knew that her husband (who was going to use her car) was a dangerous driver. Yet, she hid this fact from her insurance company. A few years later,Read more

This post analyses the impact of the RBI Working Group’s Report on Digital Lending Apps. It covers key recommendations made by the Working Group relating to credit-risk sharing, data privacy and security, artificial intelligence and buy-now-pay-later products. Regulation of digital lending in India now seems imminent. The RBI has been questioning buy-now-pay-later (BNPL) providers aboutRead more

This blog analyses existing discussions on the anti-trust regulation of the so-called ‘big-tech’ platforms in the United States of America. Calls for tech regulation Lately, the regulation of big tech companies[1]  (such as Facebook, Apple, Alphabet Inc., Google, Amazon (GAFA)) has become a political talking point[2] in the US. Earlier this year, potential democratic presidentialRead more

This piece analyzes data-driven mergers in the context of American anti-trust law. Introduction Competition authorities across the globe are actively discussing the regulation of big data and its role in merger control. The EU- aggressively pursuing big-tech regulation through Commissioner of Competition Magrethe Vestager- opened consultations for regulating digital platforms in June 2020.[1] Across theRead more

The Sri Lankan Ministry of Digital Infrastructure and Information Technology (“MDIIT”) released the latest version of Personal Data Protection Act (“PDP Bill”) on September 24, 2019. Substantial modifications were made to the previous draft of the Bill based on consultations with key stakeholders[1]. To draft the PDP Bill, the Drafting Committee looked at international bestRead more

The Personal Data Protection Bill 2019 (“PDPB”) creates a legal structure to protect the personal data of individuals. Over the past decade, athletes, teams and other sports entities have become increasingly reliant on the use of data. Sports entities collect and process data directly from athletes (through wearable technology or medical processes) and from theRead more

This is a presentation on the interconnect between India’s Industry 4.0 opportunity and it’s data policy.

There is an ancient proverb that says “a journey of a thousand miles begins with a single step”. In today’s context, if the journey is an organisation’s efforts to comply with its data protection obligations, then the single step is the process of taking stock of all the personal data it holds. This process ofRead more

The Personal Data Protection Bill, 2019 was introduced in the Parliament of India on 10 December 2019, and referred to a Joint Committee. This legislation will require businesses to revamp their data-handling practices and embed privacy into their systems and operations. Our team has put together two documents to help organisations prepare for this forthcoming law andRead more