India's most consequential privacy legislation demands a textbook equal to its ambition. Written by Shahul Hameed I, Advocate of the Kerala High Court with over twenty-one years of practice in Constitutional, Administrative, and Wakaf Law, this work is the definitive academic guide to the Digital Personal Data Protection Act, 2023 — India's first comprehensive statutory framework for personal data protection.
Grounded in the landmark nine-judge bench ruling in K.S. Puttaswamy v. Union of India (2017) that declared privacy a fundamental right, the textbook traces the Act's constitutional mandate, dissects every operative section, and subjects the legislation to rigorous critical scrutiny.
The book covers:
- Constitutional foundations — from Gobind (1975) through the Srikrishna Committee to the enacted statute
- Section-by-section analysis of the DPDP Act, 2023, including the January 2025 Draft Rules
- The consent framework, deemed consent, and children's data protections under Section 9
- Obligations of data fiduciaries — accuracy, security, breach notification, and erasure
- Rights of data principals — access, correction, grievance, and the innovative right to nominate
- Cross-border data transfers, the adequacy question, and India's EU adequacy prospects
- Exemptions and the constitutional challenge to Section 17's government carve-outs
- The Data Protection Board of India — powers, penalties up to ₹250 crore, and independence concerns
- Compliance architecture for Indian businesses — fintech, healthcare, e-commerce, and EdTech
- Significant Data Fiduciaries, DPO requirements, and Data Protection Impact Assessments
- Systematic DPDP Act versus GDPR comparative analysis across five critical dimensions
- Critical assessment of the AI governance gap and minority community data rights
Distinctive features of this expanded edition:
- Detailed model answers to every chapter-end question at LLB, LLM, and MBA standard
- Real Indian data breach case studies and landmark GDPR enforcement decisions
- Compliance checklists, a model privacy notice template, and a data processor agreement guide
- A unique perspective on minority community data rights and the Islamic jurisprudential tradition of privacy
- Full Glossary, Table of Statutes, Table of Cases, and Subject Index
Written simultaneously for LLB and LLM students requiring doctrinal and constitutional rigour, and for BBA and MBA students requiring practical compliance guidance, the book's pedagogical architecture — learning objectives, case studies, review questions, model answers, and chapter summaries — makes it equally suited to university syllabi and professional self-study.
The author brings to this subject not only courtroom experience — including standing counsel roles for the Information Kerala Mission and Labour Fed — but also a scholar-practitioner's perspective across six published academic titles spanning Islamic jurisprudence, constitutional minority rights, Muslim personal law, West Asian geopolitics, Islamic economics, and labour law.
Essential reading for students of law and management, legal practitioners, compliance professionals, and policy researchers engaging with India's data governance transformation.
