Technology Disruption — Policy Reforms

Entry	Year	Description	Impact
Information Technology (Amendment) Act, 2008	2008	Introduced provisions for data protection, cyber terrorism, and enhanced penalties for cybercrimes. It also clarified the role of intermediaries and their liabilities.	Strengthened India's cybersecurity framework and provided a legal basis for addressing emerging cyber threats, though subsequent developments highlighted the need for more comprehensive data protection.
Digital Personal Data Protection Bill, 2023	2023	Passed by Parliament, this Bill aims to provide for the processing of digital personal data in a manner that recognizes both the right of individuals to protect their personal data and the need to process such data for lawful purposes. It replaced earlier versions (2018, 2019, 2022).	Establishes a comprehensive legal framework for data protection in India, introducing concepts like data fiduciary, data principal, consent, and significant penalties for non-compliance. It will significantly impact how all digital platforms and services operate and handle user data.
Intermediary Guidelines and Digital Media Ethics Code Rules, 2021	2021	Issued under the IT Act, 2000, these rules mandate due diligence by intermediaries, including social media platforms, and establish a three-tier grievance redressal mechanism for digital media.	Increased accountability for social media and digital news platforms, addressing concerns about misinformation, content moderation, and user safety. It sparked debates on freedom of speech and regulatory overreach.