iiinova — where your digital self keeps evolving

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 31/01/2025

While Data Protection is essential, the vagueness in India’s statutory regime leaves room for executive discretion, potentially used to target dissenting opinions. Let us not be silenced! Become a member of IFF & help us speak truth to power. internetfreedom.in/donate 10/10

011 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 31/01/2025

🚨 Furthermore, obligations to share data with authorities under Section 36 can expose marginalised communities to surveillance risks, potentially jeopardising their safety and trust in the organisation. Balancing privacy with compliance is key. 9/10

111 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 31/01/2025

📝 Dilution of RTI Act: The Data Protection Act’s amendments to the RTI Act could undermine transparency by allowing authorities to withhold information under the guise of protecting personal data. This may limit accountability and hinder civil society's work. 8/10

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 31/01/2025

💸 Compliance comes at a significant cost. NGOs must invest in secure data storage, encryption, and legal expertise, diverting funds from their core missions. This is a huge burden, particularly for smaller organisations with limited resources. 7/10

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 31/01/2025

🧑‍🤝‍🧑These obligations present serious challenges for NGOs, especially in rural areas. Obtaining informed consent and delivering clear, understandable data processing notices becomes tough due to low tech access and varying education levels. 6/10

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 31/01/2025

NGOs and civil society orgs handling personal data must ensure clear consent, provide security safeguards, and fulfill Data Fiduciary duties under the Data Protection Act and the Draft Rules ! 🔒📜5/10

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 31/01/2025

🔒Consent is key! Data Fiduciaries must get clear consent from Data Principals (like donors, beneficiaries, and volunteers) before processing their personal data. It’s simple but crucial. 4/10

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 31/01/2025

🌍 Nationality doesn’t matter— even if you're a foreign entity processing personal data related to activities in India, you must comply with the Data Protection Act and the Draft Rules. This ensures global data privacy standards. 3/10

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 31/01/2025

The Data Protection Act and the Draft Rules apply if you’re processing personal data within India, whether it's digital or digitised. If you're deciding how that data will be handled, you’re a Data Fiduciary! 2/10

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 31/01/2025

🚨 Non-profits and NGOs, are you aware of how the Digital Personal Data Protection Act (2023) and the Draft Rules (2025) affect your data handling? Let’s dive in! 🧵1/10 internetfreedom.in/a-guidata-protec…

123 3

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 28/01/2025

Localisation ≠ Security. India’s push for AI dominance via data laws may backfire, risking surveillance & economic losses. Let’s rethink data sovereignty beyond state control. Full analysis by Karthika Rajmohan here […]

mas.to

Original post on mas.to

001 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 28/01/2025

From unchecked govt discretion in cross-border data transfer rules to surveillance risks, the data localisation framework is a double-edged sword. It may claim “data sovereignty,” but at what cost to rights & global cooperation? Karthika Rajmohan explains. 2/3

100 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 28/01/2025

🚨 India’s new draft data protection rules reveal a troubling tilt toward state overreach & vague governance. Our Associate Policy Counsel Karthika Rajmohan unpacks the data localisation requirements & their impact on privacy, security & trade. Read more […]

mas.to

Original post on mas.to

122 2

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 23/01/2025

With a strong focus on ethical AI and inclusive governance, our partnership is dedicated to empowering communities, championing justice, and ensuring technology serves everyone. Stay tuned as we work towards a fairer, more rights-centered AI future!🌟3/3

040 4

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 23/01/2025

AIKC is a multi-stakeholder initiative dedicated to fostering inclusive AI governance in India, empowering communities, & shaping policies that ensure AI uplifts rather than divides. 2/3

140 4

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 23/01/2025

🌍🤖We are thrilled to join the AI Knowledge Consortium (AIKC)! We aim to build capacity and foster knowledge sharing to protect human rights and digital liberties as AI continues to reshape our world. 1/3

151 5

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 20/01/2025

This verdict is a turning point. Privacy is competition, and CCI’s bold stance could set a global precedent. Stay tuned for updates—and join IFF to keep fighting for your rights in the digital age. 💪 7/7 internetfreedom.in/donate

031 3

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 20/01/2025

What’s next? Meta & WhatsApp have appealed to NCLAT, claiming CCI overstepped. IFF is a respondent, opposing the appeal. The case continues on Jan 23, 2025. This battle isn’t just legal—it's about your digital rights in the face of Big Tech. 6/7

121 2

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 20/01/2025

Privacy + competition? The “privacy-antitrust paradox” is real. Around the world, regulators are starting to see how data practices drive market power. CCI’s order is a big step for India, making privacy a competitive parameter, especially in zero-price markets. 5/7

111 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 20/01/2025

This is about you. Your personal data fuels Meta’s empire—targeted ads, WhatsApp Business, & cross-platform integration. The 2021 Policy killed opt-outs, giving Meta an unfair edge while ignoring privacy concerns. 4/7

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 20/01/2025

Why does this matter? CCI defined two key markets: OTT messaging (think WhatsApp) and online display ads. Meta’s dominance in both was linked to its vast data collection, creating a loop: more data → better ads → more revenue → more dominance. 3/7

111 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 20/01/2025

The case? WhatsApp’s 2021 Policy forced users to accept broad data-sharing with Meta or lose access. CCI found this “take it or leave it” approach abusive, leveraging Meta’s dominance in messaging & online ads to crush competition and exploit user data. 2/7

111 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 20/01/2025

🚨 On Nov 18, 2024, the CCI hit Meta & WhatsApp with a ₹213.14 crore penalty for anti-competitive practices tied to WhatsApp's 2021 Privacy Policy update. This marks a major shift in how India views privacy & competition law in the digital age. 🧵1/7 […]

mas.to

Original post on mas.to

131 3

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 18/01/2025

Amid the global moral panic over online child safety, and the recent Draft DPDP Rules, 2025, IFF fellows Medha Garg & Shravani Nag write in The Quint highlighting the need for a more thoughtful approach that considers broader implications […]

mas.to

Original post on mas.to

020 2

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 17/01/2025

The Draft DPDP Rules, 2025 expand on the Govt's surveillance powers with Rule 22. Cautioning against the adverse impact on privacy if they are passed, IFF fellows Rubayya Tasneem & Injila Muslim Zaidi demystify the draft in The Wire ✨ […]

mas.to

Original post on mas.to

012 2

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 16/01/2025

IFF wrote to the ECI twice. First on April 8 (as a collaborative effort) & then on May 13, voicing concerns about inaction on the flood of deepfakes & “cheapfakes” (misleading, low-quality content) during the elections & other MCC violations.

001 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 16/01/2025

Let's rewind to May 2024. The ECI issued guidelines on AI generated content on May 6, 2024 after two rounds of polling during the Lok Sabha elections. Voters were already at the polls, & the ECI's response came far too late to protect the election process. (3/10) […] [Original post on mas.to]

112 2

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 16/01/2025

The ECI on January 16 issued an advisory urging parties to label AI-generated content—at first glance, it seems like a step toward accountability. But given the timing, it raises some questions, particularly for enforcement that suffers from delays & apprehensions of bias. Why? Read on. (2/10)

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 16/01/2025

Delhi elections are heating up, & so is the use of AI-generated content. Delhi Police has filed an FIR against AAP for posting manipulated images of PM Modi & Amit Shah. But what's really at stake here? A bigger issue of inadequate & reluctant regulation by the ECI 1/10

133 3

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 16/01/2025

We have written to them to express our disappointment with the removal and airing concerns that a blanket ban on VPN services leaves citizen data privacy vulnerable. Security cannot be an excuse to impact fundamental rights to freedom of speech & expression & privacy […] [Original post on mas.to]

063 6

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 16/01/2025

The reason mentioned for their removal was non-compliance with requests for information by various Indian agencies over hoax bomb threats received in 2024 by several schools, hospitals & airports. MeitY has also looked into banning Proton Mail in early 2024 over hoax bomb threats in Chennai […]

mas.to

Original post on mas.to

132 3

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 16/01/2025

As reported by TechCrunch on January 02, 2025, I4C sent a notice to Google & Apple seeking the removal of 14 VPN Services from Google’s Play Store, Chrome Store & a website hosted on Firebase. Google disclosed the notice to Harvard’s Lumen Database. 2/5 […]

mas.to

Original post on mas.to

132 3

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 16/01/2025

Heard about @cloudflare’s 1.1.1.1 VPN getting removed in India? We’re on it. IFF has written a letter to the I4C with questions noting our disappointment with the removal of 14 VPN Services from Indian app stores pursuant to an order issued on October 29, 2024. 🧵1/5 […] [Original post on mas.to]

133 3

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 13/01/2025

“The question is… which is to be master—that’s all,” observed Nikhil Dey during #privacysupreme2024. Drawing from Through the Looking-Glass, Apar Gupta examines how these policies elevate state control over constitutional principles. 3/3 Read more here! […]

mas.to

Original post on mas.to

000 0

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 13/01/2025

The rules are riddled with gaps. Consent notices (Rule 3) lack clear standards, & govt requisitions (Rule 22) come with no real checks. How can we trust the system to protect our data without independent oversight? Apar Gupta breaks it down. 2/3

100 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 13/01/2025

“Who holds the reins—us or the state?” IFF’s Founder-Director Apar Gupta examines how the Draft Digital Data Protection Rules, 2025, threaten privacy through vague governance & overreach. 1/3 Read in The Hindu […]

mas.to

Original post on mas.to

111 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 09/01/2025

⚠️ The rules are overall vague. Terms like "sovereignty," "security," & "educational activities" are not clearly defined, which gives the govt room for broad interpretations, leading to misuse & eroding trust in the data protection framework. 😟9/9

012 2

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 09/01/2025

⚠️ And the most concerning part: the state can demand personal data from companies for vague reasons like "national security." No clear limits or safeguards, which opens the door to surveillance & privacy violations. 😟 8/9

102 2

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 09/01/2025

🏛️ The Data Protection Board’s independence is questionable. The govt has significant influence over appointments, & the appeals process relies on digital tools, excluding people without internet access or digital literacy. 🔌7/9

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 09/01/2025

🌐 The draft rules also introduce stricter regulations for cross-border data transfers. Data Fiduciaries must comply with govt orders before sharing data abroad. This could lead to data localization & impact foreign businesses in India. 📉 6/9

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 09/01/2025

🔐 Rule 13 gives Data Principals the right to access, correct, & erase their data. Sounds good, right? But there's an exception allowing data sharing with law enforcement without full transparency—raising fears of surveillance. 👮‍♀️5/9

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 09/01/2025

📊 Significant Data Fiduciaries (SDFs) face stricter rules, like annual Data Protection Impact Assessments (DPIAs). But without clear guidelines, these assessments could end up weak, & mandatory data localization might hurt international trade. 🌍 4/9

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 09/01/2025

📢 Data Fiduciaries must notify Data Principals of data breaches. But what counts as a "breach" & how timely will notifications be? There's a lot of vagueness here, & the lack of clear definitions leaves room for misinterpretation. 🧐3/9

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 09/01/2025

🧑‍👦 For children's data, the rules mandate verifiable parental consent. Parents must confirm their identity via Digital Locker. But what if you don’t have access to it? Or don’t want to use it? This raises concerns about accessibility & centralisation. 🤔 2/9

101 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 09/01/2025

🚨 Draft Digital Personal Data Protection Rules, 2025 are here, & while they aim to strengthen data privacy, there are some major concerns. Let's break down the issues from parental consent for children's data to excessive state powers. 👇1/9 […]

mas.to

Original post on mas.to

113 3

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 07/01/2025

⏪Amplify, ⚡engage & request MeitY to consider our requests in the spirit of transparency to make the public consultation process more inclusive. Stay tuned for a detailed explainer, and join us on Friday for a briefing call on the DPDP Rules. 5/5

000 0

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 07/01/2025

3. Language barrier! Comments only in English and Hindi make the process even more restrictive & limited to a small stakeholder set. We urge the ministry to accept comments made in all languages mentioned in the Eighth Schedule of the Constitution. 4/5

100 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 07/01/2025

2. Crucial counter arguments! We are also requesting the ministry to offer the opportunity to allow counter comments to be made to the draft rules. 3/5

100 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 07/01/2025

1. Let the people know! We request MeitY to make the comments received by the ministry to be made public on the ministry's website, with the individual's identity being redacted. This will aid transparency, counter-comments and further public discourse. 2/5

100 1

Internet Freedom Foundation @internetfreedom.mas.to.ap.brid.gy · 07/01/2025

On January 3, MeitY released the Draft DPDP Rules, 2025, 16 & a half months after the DPDP Act, 2024 was enacted. We wrote to MeitY with some requests to make the consultation process more accessible and transparent. 1/5 drive.google.com/file/d/1z_cwfB9ufw…

101 1