Published Paper Details:

This paper examines the interaction between artificial intelligence (AI) data practices and the Digital Personal Data Protection Act (DPDP), 2023 in India. It analyses how the Act structures lawful data processing across AI lifecycles--collection, training, deployment, and monitoring--through consent-based and legitimate-use mechanisms. The study adopts a doctrinal legal methodology to interpret statutory provisions, focusing on Sections 3-11 that regulate consent, accuracy, children's data, and Significant Data Fiduciaries. It further explores constitutional underpinnings of privacy under Article 21 and judicial precedents such as Justice K.S. Puttaswamy v. Union of India. Comparative insights are drawn from the EU's GDPR, the UK's AI regulation approach, and OECD principles, situating India's framework within global data governance trends. The paper concludes that the DPDP Act operationalises privacy-by-design for AI, translating constitutional rights into enforceable duties of accountability, transparency, and individual control, while recognising implementation challenges that require detailed rulemaking and coordinated sectoral oversight.