- MeitY issued the Digital Personal Data Protection (Removal of Difficulties) Order, clarifying parental and guardian consent requirements and data audit obligations.
- SEBI published cybersecurity guidance on strengthening authentication and access controls to improve the security of digital systems.
- CERT-In issued an advisory concerning the potential misuse of AI agents to obtain unauthorised access to systems and exploit Indian ICT assets.
- CERT-In issued an advisory concerning the compromise of eMudhra intermediate CA certificates, highlighting security risks to digital authentication infrastructure.
- The State Bank of India reported a suspected data breach involving personal information of customers found on the dark web and initiated an investigation.
- The Central Board of Film Certification initiated an investigation into an alleged data breach involving confidential film certification documents.
- A consulting firm reported a data breach involving potentially sensitive client information accessed through a third-party IT platform, raising concerns over data security.
- The Government expressed willingness to consider news publishers’ suggestions concerning the DPDP Act, following concerns about its impact on press freedom.
- The Supreme Court sought responses from the Centre and NCPCR on a petition seeking age verification, parental consent and restrictions on children’s social media access.
- The Kerala High Court directed the Centre to make the Data Protection Board functional within eight weeks while hearing a petition on facial recognition-based airport entry systems.
