Parliament Passes Controversial Data‑Privacy Amendments Amid Tech Lobby Push
On September 13, 2026, the Lok Sabha approved the Data Privacy Act (Amendment) Bill 2026 with a 287‑to‑124 vote, just hours before the Rajya Sabha’s scheduled debate. The amendment introduces a ‘National Security Access Clause’ that allows agencies to request personal data without prior judicial approval, provided a ministerial order is issued. The move has ignited fierce protests from tech giants, privacy advocates, and opposition parties.
Key Provisions of the Amendment
The bill adds Section 9A, granting the Ministry of Home Affairs authority to issue a ‘Data Access Order’ (DAO) for any individual’s data held by private entities, with a 48‑hour compliance window. It also reduces the consent threshold from ‘explicit, informed’ to ‘reasonable’ for data used in AI training, citing the need to foster innovation. Penalties for non‑compliance drop from ₹10 crore to ₹2 crore per violation, a change championed by the Confederation of Indian Industry (CII).
Government Rationale
Minister of Electronics and Information Technology Rajesh Kumar justified the amendment as essential for counter‑terrorism and cyber‑espionage prevention, referencing a recent cyber‑attack on the Indian Railways that compromised 3.4 million passenger records. He cited a confidential briefing where intelligence agencies warned of “persistent threats” from state‑sponsored actors targeting Indian critical infrastructure.
Tech Industry’s Position
Major Indian tech firms, including Tata Digital and Reliance Jio, welcomed the reduced compliance costs, estimating a collective saving of ₹1.2 billion annually on legal and data‑governance overheads. International players like Google India and Meta India warned that the broadened access could trigger data‑localisation backlash from the EU, jeopardising cross‑border data flows valued at $15 billion per year.
Civil‑Society and Opposition Response
The Internet Freedom Foundation (IFF) launched a petition that has gathered 1.8 million signatures, demanding the bill be sent back for revision. Opposition leader Priyanka Singh called the amendment “the death knell for digital rights,” arguing it contravenes Article 21 of the Constitution, which guarantees privacy as a fundamental right. Legal scholar Prof. Arvind Mohan of NLSIU predicts the amendment will be challenged in the Supreme Court within six months.
Economic Impact Assessment
A PwC India report released on September 10 projected that the amendment could boost the domestic AI sector’s growth rate from 22 % to 28 % by 2030, due to easier data access for model training. Conversely, the same report warned of a potential 3‑5 % decline in foreign direct investment in the fintech segment, as investors reassess data‑risk exposure.
International Reactions
The United States’ Department of State issued a statement on September 14 expressing “concern” over the erosion of consent standards, urging India to align with the OECD Privacy Guidelines. The European Commission, meanwhile, announced a review of the EU‑India data‑adequacy framework, which could be suspended if the amendment is deemed non‑compliant with GDPR equivalence.
Potential Legal Battles Ahead
Legal experts anticipate a multi‑track challenge: a petition in the Delhi High Court contesting the constitutional validity of Section 9A, and a separate case before the Competition Commission of India alleging anti‑competitive advantage for domestic firms over foreign rivals. The Supreme Court’s 2022 verdict in *Justice K.S. Puttaswamy v. Union of India* will likely serve as the cornerstone of the arguments.
The Data Privacy Act amendment sits at the crossroads of security, innovation, and individual rights. As the legal battles unfold, Debatrix invites readers to weigh in: should national security trump consent, or does the digital age demand a new balance?