DPDPA vs GDPR: Where India’s Privacy Laws Diverges on Consent, Lawful Bases and Data Subject Rights

The European Union’s General Data Protection Regulation (GDPR”) was adopted in 2016, becoming enforceable across all European Union (EU) Member States from May 2018. The GDPR established a unified framework for protection of personal data of EU individuals, applicable to entities controlling and processing such data both within and outside EU territory. In doing so, it set a global benchmark for privacy governance, shifting the focus from a compliance-based regime to one grounded in individual rights and accountability.