Regaining Data Autonomy: Legal Pathways to Transparency in India’s Data Broker Industry under the DPDP Act, 2023

Abstract

The data broker industry, while integral to the digital economy, operates largely in obscurity, posing significant challenges to individual privacy. This research article examines the transparency issues inherent in data broker practices, focusing on how individuals, known as data principals, can regain control over their personal data under the Digital Personal Data Protection Act (DPDPA) 2023. The paper explores the deficiencies of current regulations, the risks posed by the opaque and shady nature of data brokers, and suggests legal remedies. Drawing comparisons with the General Data Protection Regulation (GDPR) in the European Union, the paper proposes ways to strengthen India’s regulatory framework and protect data principals from exploitation.