Published Paper Details:

Abstract The rapid growth of India's digital economy has generated immense opportunities for innovation, commerce, and governance, while simultaneously raising complex legal and regulatory challenges related to data privacy and cybersecurity. With the exponential rise in internet penetration, digital transactions, and cloud-based services, the protection of personal and sensitive data has emerged as a pressing concern. This paper examines the evolving legal framework governing data privacy and cybersecurity in India, with particular emphasis on the Information Technology Act, 2000, its subsequent amendments, and the recently enacted Digital Personal Data Protection Act, 2023. It also explores the interplay between domestic legislation and international standards, such as the European Union's General Data Protection Regulation (GDPR), to highlight India's progress and gaps in harmonization. Through an analytical approach, the study evaluates judicial pronouncements, regulatory mechanisms, and the role of enforcement agencies in safeguarding digital rights. Key challenges, including cybercrime proliferation, inadequate awareness, technological vulnerabilities, and jurisdictional complexities, are critically discussed. The research further underscores the tension between national security imperatives and individual rights to privacy in a digital-first environment. The findings reveal that while India has made significant strides in framing a legal architecture for data protection, there remain pressing concerns regarding enforcement, accountability, and capacity building. The paper concludes by suggesting reforms for strengthening regulatory institutions, enhancing cross-border cooperation, and promoting cyber resilience to ensure that India's digital economy evolves in a secure, inclusive, and rights-based manner.