The article examines the limitations of India’s Digital Personal Data Protection (DPDP) Act, 2023, in regulating AI platforms. While the Act establishes safeguards for consent, data minimisation and user rights, it does not adequately address algorithmic opacity, bias or the difficulty of erasing personal data embedded in trained AI models. The authors, Gaurav G. Arora and Aditi Richa Tiwary of JSA, advocate risk-based AI regulation, stronger transparency and accountability requirements, and stricter penalties to protect users from AI-driven harms.
Please click here to read the full article by Gaurav G. Arora, Partner, and Aditi Richa Tiwary, Associate, published in BW Legal World.










Gaurav G. Arora is a Partner at JSA with over 12 years of experience advising multinational corporations, investment funds, and high-growth businesses on mergers & acquisitions, private equity investments, corporate structuring, cross-border transactions, foreign direct investment, and general corporate matters. He regularly advises clients on complex domestic and international transactions across the technology, healthcare, manufacturing, real estate, retail, and services sectors. Gaurav is recognised as an ALB India Rising Star and among the Top 10 Young Lawyers by ALB Thomson Reuters.