The article examines gaps in India’s Digital Personal Data Protection (DPDP) Act, 2023, concerning AI platforms. While the Act regulates personal data processing through consent, purpose limitation and user rights, it does not adequately address algorithmic opacity, bias and difficulties in erasing data embedded in trained AI models. The authors advocate risk-based AI regulation, stronger accountability, greater transparency and penalties to protect users from AI-driven harms.
Please click here to read the full article by Gaurav G. Arora, Partner, and Aditi Richa Tiwary, Associate, published in IT Voice.
Gaurav G. Arora is a Partner at JSA with over 12 years of experience advising multinational corporations, investment funds, and high-growth businesses on mergers & acquisitions, private equity investments, corporate structuring, cross-border transactions, foreign direct investment, and general corporate matters. He regularly advises clients on complex domestic and international transactions across the technology, healthcare, manufacturing, real estate, retail, and services sectors. Gaurav is recognised as an ALB India Rising Star and among the Top 10 Young Lawyers by ALB Thomson Reuters.