For a country with a significant corpus of the world’s personal data, India’s data protection framework is notoriously deficient. Improperly scoped, imprecisely drafted, and with no real enforcement culture, the extant framework1)as contained within the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information)…