Abstract

In an increasingly interconnected world, data protection has become a critical issue. Citizens grapple with the delicate balance between privacy and convenience, while companies capitalize on personal information for their benefit. The General Data Protection Regulation (GDPR), implemented by the European Union, stands as a robust legal framework that prioritizes individual rights. It imposes stringent requirements on companies, emphasizing transparency, accountability, and consent. Meanwhile, India has also taken significant strides in data protection. The recently enacted Digital Personal Data Protection Act, 2023 (DPDP Act), aims to strike a delicate balance between individual rights and lawful data processing. The Indian legislation draws inspiration from the GDPR but tailors its provisions to the unique socio-cultural context of the country. It emphasizes the rights of data subjects, incorporating the right to erasure, the facility of data mobility, and the entitlement to obtain personal information. Social media platforms play a pivotal role in this landscape. They collect vast amounts of user data, often without explicit consent. The paper critically examines India’s data protection laws concerning social media platforms. It delves into issues such as user consent, data localization, and cross-border data transfers. Furthermore, it explores the challenges faced by social media companies in adhering to these regulations while maintaining seamless user experiences. In conclusion, this comprehensive examination sheds light on the evolving data protection landscape in India. It underscores the need for robust legal frameworks that safeguard individual privacy while fostering innovation and economic growth.

Keywords