Data Privacy Day: What it means for India as China’s DeepSeek upends AI

Even as the world remains in thrall at China’s DeepSeek upending the artificial intelligence (AI) landscape, what does it all bode for the individual user like you and me, and the privacy and security we hope for? On Data Privacy Day today, the question is more pertinent than ever.

“The rise of generative AI, internet of things (IoT) and real-time applications necessitates robust IT infrastructure and raises concerns over data privacy,” said Manoj Paul, managing director (India) of Equinix, a global digital infrastructure company. “India’s Digital Personal Data Protection (DPDP) marks a significant milestone in the nation’s pursuit of a safer and privacy-focused digital ecosystem.”

Delayed by years and even after being passed by Parliament 16 months ago and then going through a vetting process by parliamentary committees, DPDP was finally put up for public consultation earlier this month by the Union government. Best case scenario is that it will be implemented by late summer, though doubtful.

“AI is transforming the cybersecurity ecosystem, serving as both a shield and a weapon. On the one hand, it enhances defences with sophisticated threat detection and automated countermeasures. On the other hand, it empowers malicious actors to launch precise phishing attacks, exploit unknown vulnerabilities, and fabricate realistic deep fakes,” said Achyuth Krishna, head of IT and information security at Whatfix, an Indian digital adoption platform.

In its annual cybersecurity report released this weekend, Checkpoint, the world’s leading cybersecurity solutions provider, pointed out that Indian companies faced an average 3,291 attacks per week over the past six months — that is significantly higher than the global average of 1,847 attacks per week.

Globally, Checkpoint noted that cyberattacks went up 44 per cent year-on-year, with the threat ecosystem maturing.

“These threats underscore the importance of a proactive approach to security and privacy. Evolving global standards such as GDPR and India’s DPDP Act underscore the importance of incorporating privacy by design into systems to address emerging challenges,” added Krishna.

With Agentic AI, that is AI that can automatically take decisions without prompts and now the flavour ahead of generative AI, it is also throwing up more questions and worries about privacy than answers. As Varun Babbar, managing director (India & SAARC) of Qlik, a data and AI platform, explained, “Agentic AI can transform productivity by handling complex tasks independently and adapting to feedback, but its responsible use is essential – making data privacy crucial for building trust.

“Protecting privacy today means being transparent, ethical, and proactive. As Agentic AI evolves, challenges like skill gaps, fragmented governance, and real-time data needs highlight the importance of clear processes and secure data pipelines. To succeed, businesses must upskill teams, implement strong governance, and invest in impactful AI solutions,” Babbar said, adding, “privacy and authenticity (today on Data Privacy Day) are more critical than ever.”

This year’s Data Privacy Day’s theme is ‘put privacy first’; the day was first initiated in Europe in 2007, followed two years by the US and now observed by around 50 countries including India.