biztechai.in

Is the Data Protection Board toothless?

Thu, 02 Apr 2026 21:32:00 +0530

India’s Data Protection Board was formally set up and notified on November 13, 2025. The Data Protection Board is an entity set up by the Digital Personal Data Protection Act, 2023.

It is the first adjudicatory forum in the implementation of the DPDPA. The Board exists, with its office in New Delhi, but there are no members yet. Once appointed, the Board will not have much to do as the effective date of operationalising the DPDPA is May, 2027. However, even if the DPDPA comes into force, the Board appears to be a passive entity which is corporate-centric rather than citizen-centric.

Understanding Artificial Intelligence Models

Mon, 23 Mar 2026 21:32:00 +0530

Artificial intelligence is broadly described as the science of building machines that can perform tasks that usually require human-like intelligence.

An artificial intelligence model is a specific machine based system designed to take in information and infer how to generate an output. These outputs can include predictions, content, or decisions that have an impact on the physical or virtual world.

Understanding Doxxing

Mon, 23 Mar 2026 21:32:00 +0530

Doxxing, which is short for dropping documents, is the act of intentionally exposing an individual’s private or personally identifiable information online without their consent. This practice typically involves gathering data from various sources to reveal details such as a person’s real name, home address, phone number, workplace, or private messages.

One-Shot Learning

Sat, 21 Mar 2026 21:32:00 +0530

One-shot learning has been making significant waves in the artificial intelligence sector recently. It has dominated academic discourse, with major players like Google Brain and DeepMind integrating these techniques into their most advanced models.

So, what is it?

One-shot learning is an object categorization power that allows a machine learning model to recognize and classify objects after being exposed to only one single training instance.

Actors under the EU AI Act

Thu, 19 Mar 2026 21:32:00 +0530

The EU AI act conceptualises a role for four types of players in deployment of AI models or systems in the European Union: (i) providers , (ii) deployers , (iii) distributors and, (iv) importers .

This categorisation allows the EU AI regulations to deploy varying levels of responsibility for different actors along the AI value chain. The categorisation also allows comprehensive regulation of actors in the AI supply chain minimising regulatory gaps.

High Risk AI systems under EU AI Act

Sat, 21 Feb 2026 19:24:00 +0530

First and foremost, all AI systems enumerated in Annex III are considered high-risk regardless of any other factors.

AI systems that are not in Annex III can also be classified as high risk, provided they satisfy the following conditions:

=> The AI system is to be used as a safety component of a product or the AI system is itself a product classified under Annex I

Right to lodge a complaint

Thu, 19 Feb 2026 19:24:00 +0530

The EU AI Act enables users to lodge a complaint with a market surveillance authority. A market surveillance authority is to be set up by each Member State in accordance with Article 10 of the Regulation (EU) 2019/1020. The regulation enables market surveillance to improve the functioning of EU’s market by providing protection of public interests such as health and safety of the customers, protection of the environment and public security.

Transparency obligations under EU AI Act

Mon, 02 Feb 2026 19:24:00 +0530

Providers and deployers of certain AI systems are subject to transparency obligations under the EU AI Act. The information regarding transparency is to be provided in a clear and distinguishable language at the time of first interaction or exposure to the AI system. Accessibility requirements must be conformed by the AI systems.

GDPR Processor Obligations: A 2026 Briefing

Tue, 27 Jan 2026 10:00:00 +0530

The General Data Protection Regulation (GDPR) imposes specific obligations on data processors — entities that process personal data on behalf of a controller. Understanding these obligations is critical for any organisation operating as a processor or engaging processors for data handling.

OpenClaw - a guide

Thu, 22 Jan 2026 19:24:00 +0530

OpenClaw made waves when it came out. It was all over the news with OpenAI even hiring its creator on its AI team. So, what is it? OpenClaw is an open source software that allows different AI components to talk to other applications. For example, it can connect an AI-model such as GPT-5 to a messaging app such as WhatsApp. The connection will allow the model to read messages and reply to these messages. Claude, Chat-GPT and Perplexity also allow connecting different apps such as WA or Google Drive. So, what is the difference? The difference is that OpenClaw runs locally. Locally i.e. on your computer.

Mirrorbot - breaking the ice with a robot

Fri, 16 Jan 2026 19:24:00 +0530

The mirrorbot is a research project by Cornell University. It aims to act as a spatial mediator between human beings in a physical space to bring them together. Unlike traditional robots that aim to replace human interaction, the mirrorbot facilitates eye contact between strangers by mediating between them.

Prohibited practices under the EU AI Act

Wed, 14 Jan 2026 19:24:00 +0530

The EU AI Act enumerates six types of prohibited practices when developing, deploying or using AI systems. These are - (i) manipulative or deceptive practices, (ii) exploitation of user’s vulnerability, (iii) unrestricted use of social scores to classify users, (iv) predictive policing only using AI, (v) scraping facial recognition data indiscriminately, (vi) inferring emotions, (vii) categorising users based on biometrics , and (viii) real-time use of biometrics in public.

Employee consent under the DPDPA

Sat, 20 Dec 2025 21:32:00 +0530

Employers need to process employees’ personal data, which is necessary for background checks, credit checks, and so on. To do this, they must obtain the employee’s consent, as it is the only basis for processing personal data under the DPDPA. Getting this consent is a complex process. However, if obtained correctly, there is no obstacle to processing the employee’s personal data.

User rights - Right to access information about personal data

Tue, 11 Nov 2025 21:32:00 +0530

The Data Principal (i.e. the user) has a right to access information about their personal data processed by a company or a firm (i.e. the Data Fiduciary). To provide this information, the company has to build channels that allow such information to be processed. This information is to be provided by the Data Fiduciary in the form of a summary. To be able to provide these records, the Data Fiduciary must have the information available with them.

Grievance redressal compliance under the DPDPA

Thu, 06 Nov 2025 21:32:00 +0530

Grievance redressal is a core compliance that every Data Fiduciary must address. Grievance redressal is a right of the Data Principal (i.e. the user) under the DPDPA. The legislative intent to categorise grievance redressal as a right is firmly rooted in iterations of the previous bills. Though the Act does not expressly provide for appointment of a Grievance Officer, firms or entities processing data will likely have to appoint one to comply with the Act.

India AI Governance Guidelines: MeitY's Framework Explained

Wed, 05 Nov 2025 10:00:00 +0530

India’s Ministry of Electronics and Information Technology (MeitY) has released AI governance guidelines that represent the country’s first comprehensive framework for responsible AI deployment. While advisory rather than legally binding, these guidelines carry significant weight for businesses operating AI systems in India.

About

Mon, 01 Jan 0001 00:00:00 +0000

About biztechai.in

biztechai.in provides analysis and updates on the intersection of technology and law, with a focus on:

India’s Digital Personal Data Protection Act (DPDPA) — compliance obligations, data fiduciary duties, consent frameworks, and enforcement developments
GDPR and global data protection — processor obligations, cross-border transfers, enforcement actions, and comparative analysis with Indian law
AI governance — India’s AI governance guidelines, MeitY frameworks, EU AI Act developments, and emerging regulatory approaches
Cybersecurity regulation — CERT-In directions, incident response obligations, and security standards

Disclaimer

The content on this website is for informational and educational purposes only. It does not constitute legal advice and should not be relied upon as such. For specific legal queries, please consult a qualified legal professional.

Cookie Policy

Mon, 01 Jan 0001 00:00:00 +0000

1. What Are Cookies

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work efficiently, provide information to the website owners, and enhance the user experience.

DPDP Act Applicability Checker

Mon, 01 Jan 0001 00:00:00 +0000