legalanswers.in logolegalanswers.in

Technology & Future Law

Cryptocurrency, Smart Contracts, and Web3 regulation.

Can I store Indian user data outside India?

Generally yes — the DPDP Act, 2023 permits cross-border data transfer to most countries (except notified 'negative list'). But sector-specific rules (RBI, SEBI, telecom) impose stricter localisation requirements.
Reference: DPDP Act, 2023; RBI Directions on Storage of Payment System Data, 2018; sector-specific guidelines (SEBI, IRDAI, TRAI)

What are the legal rules for flying drones in India?

Drones governed by Drone Rules, 2021 (and Drone (Amendment) Rules 2022, 2023). Categorised by weight (Nano, Micro, Small, Medium, Large). Register via DigitalSky portal (digitalsky.dgca.gov.in), get UIN. No-permission-no-takeoff (NPNT) compliance. Red, Yellow, Green zones based on airspace. Nano drones in Green zone exempt; others need Remote Pilot Licence + permissions.
Reference: Drone Rules, 2021 (as amended 2022, 2023); Aircraft Act, 1934; Digital Personal Data Protection Act, 2023; Bharatiya Nyaya Sanhita, 2023

What are the data breach notification obligations under India's Digital Personal Data Protection Act 2023?

Under the Digital Personal Data Protection Act, 2023 (DPDPA), a data fiduciary — any organisation that collects and processes personal data — must notify the Data Protection Board and every affected individual of a personal data breach. The notification must be given in the "prescribed manner" (rules to be notified by the government). Failure to notify is a civil default attracting a penalty of up to ₹200 crore per instance under Schedule 1 of the Act.
Reference: Digital Personal Data Protection Act, 2023 (Sections 2(t), 8(6), 18, Schedule 1); Information Technology Act, 2000 (Section 43A, superseded in part); MEITY DPDPA full text

How do I complain about spam calls and unsolicited commercial messages in India (TRAI DND)?

Register on the National Customer Preference Register (NCPR/DND) via the TRAI DND app, your telecom operator's app, or by calling/SMSing 1909. To report a specific spam call or SMS, SMS 'COMP' to 1909 within 7 days of receiving it; for fraud, phishing or impersonation calls/messages, use the Chakshu facility on the Sanchar Saathi portal within 30 days. Operators must act against unregistered senders within 5 days, and violators face a 15-day bar on first offence and disconnection on repeat violations under the TCCCPR, 2018 (as amended).
Reference: Telecom Commercial Communications Customer Preference Regulations (TCCCPR), 2018, as amended by the Telecom Commercial Communications Customer Preference (Second Amendment) Regulations, 2025; Telecommunications Act, 2023; TRAI Act, 1997