Data Privacy Day: How GCCs and Indian IT are Leading the Charge
As we celebrate Data Privacy Day, it is important to acknowledge the increasing complexity of cybersecurity and the higher stakes involved in protecting digital assets. During a recent session at the World Economic Forum (WEF), experts discussed the rise in cyberattacks and the urgent need for effective defences. “Whenever there is conflict in the political space, cyber conflict follows,” said Matthew Prince, CEO of Cloudflare. Highlighting the scale of the challenge, Prince noted that his company blocks over 220 billion cyberattacks daily. From Russia’s invasion of Ukraine to the conflict in Gaza, cyber warfare has targeted critical infrastructure and disrupted communication systems, underscoring the growing link between physical and digital conflicts. The WEF Global Cybersecurity Forum 2025 report also highlights a concerning gap between organisations’ awareness of cybersecurity risks associated with AI and their preparedness to mitigate these risks. While two-thirds of companies recognise that AI will significantly impact cybersecurity this year, only 37% have the necessary tools to assess and address AI-related security threats effectively. The challenge is particularly acute for smaller organisations, with 69% lacking adequate safeguards for the secure deployment of AI technologies. This lack of readiness could leave them vulnerable as AI adoption accelerates without sufficient protections in place. A Collective Call to Safeguard Personal Data From healthcare to commerce, education, and governance, safeguarding data has become essential to building trust and fostering innovation in every sector. “At Dell Technologies, we believe data privacy is foundational to a resilient digital ecosystem. Organisations, governments, and individuals share a collective responsibility to protect sensitive information and uphold data rights,” said Ramesh Jampula, vice president, IT, India and APJC regional CIO, Dell Technologies. Businesses Lead with Privacy-by-Design Data privacy is no longer a box to check for compliance—it is a cornerstone of customer trust and financial stability. “Our technology and operations platforms underpin the daily trading of, on average, more than $10 trillion in equities, fixed income, and other securities globally,” said Prasad Vemuri, chief information officer, Broadridge Financial India. “We recognize that robust data privacy transcends compliance—it is the bedrock of financial stability and client trust,” he said. Meanwhile, SBM Offshore said that its advanced fleet of Floating Production Storage and Offloading (FPSOs) generate enormous volumes of operational data through extensive sensor networks that monitor equipment performance, safety, and efficiency. “We leverage this data using digital agents—advanced systems designed to detect anomalies and predict potential failures. These technologies enable us to take proactive measures and maintain high safety standards,” said Vikrant Sharma, IT department manager, SBM Offshore India. Beyond laws and technology, Data Privacy Day is a reminder of the importance of empowering individuals to take control of their digital identities. Consent and control are central to ethical data practices, ensuring people can decide how their personal information is shared and used. “This International Data Privacy Day, we should highlight consent’s vital role in digital ethical practices. When individuals share information willingly, they must maintain authority over its modification, deletion, and utilisation,” said Prashant Singh, COO, LeadSquared. Commenting on the same thought, Jay Swamidass, vice president and global head of sales, Rakuten SixthSense said, “Privacy isn’t an upshot of chance. It comes from putting in the effort to create strong systems, holding ourselves accountable, and fostering a culture where privacy matters to everyone, at every level.” He further mentioned that Rakuten SixthSense emphasises that privacy is fundamentally about trust—the trust individuals place in the organisation when sharing their data. Recognising that every piece of data represents a person, Rakuten SixthSense takes this responsibility with the utmost seriousness. India’s Take on Data Privacy India has made significant strides in data protection with the introduction of the Digital Personal Data Protection (DPDP) Act. The legislation places a strong emphasis on individual rights, such as consent, data correction, and erasure, while imposing strict penalties for non-compliance to prevent data misuse. “The DPDP Act reflects the global push toward stricter data governance and privacy norms in an increasingly digital world,” said Rohith Reji, co-founder & CEO, Neokred. “It sets clear principles around lawful data processing, consent, and transparency.” Commenting on the Draft Digital Personal Data Protection Rules 2025, a Reddit user wrote, “The million-dollar question is: What will happen to SPDI rules once the Digital Personal Data Protection (DPDP) Act comes into force?” The user also said that unlike GDPR and other privacy laws, the Indian legislation does not further classify personal data within the Act itself, leaving open the question of how this aspect will evolve. “It will be interesting to see which direction it goes in,” as the lack of categorisation sets it apart from its global counterparts. Another unique feature of the DPDP Act is its restriction to electronic data only. “It will be interesting to see how companies implement this limitation,” given its potential operational and compliance implications. That said, this version of the Act appears far more refined than earlier drafts. “I do like this version over the previous draft and the ridiculous suggestions provided by the JPC committee,” such as the inclusion of non-personal data. These improvements reflect a more focused and practical approach to data protection in India. Collaboration and Education Strengthening privacy frameworks requires collaboration between industries, governments, and individuals. Companies like Bosch Global Software Technologies are championing continuous education and accountability to build a secure digital future. “At Bosch Global Software Technologies, we recognize that data protection is not just about regulatory compliance—it’s about fostering trust and resilience,” said Vindhya Kudva, head of data protection & information security. “Through continuous education and partnerships, businesses can navigate data security complexities responsibly.” Kudva added, quoting Zig Ziglar, “People often say motivation doesn’t last. Neither does bathing—that’s why we recommend it daily. The same applies to data privacy awareness—continuous education and vigilance are essential.” Building a Privacy-Focused Future The collective focus on reskilling, recruitment, and workforce development will be critical to building a privacy-focused digital future. “As advancements in AI, edge computing, and IoT create new opportunities and challenges, the importance of data privacy will only grow,” said Jampula. However, according to the WEF Global Cybersecurity Forum 2025 report, the sector faces a significant shortfall in cybersecurity talent, with up to 4.8 million professionals needed to bridge the gap. Only 14% of organisations report having the skilled workforce they require to tackle current cybersecurity challenges. In the public sector, the issue is even more pronounced, with nearly half (49%) of respondents stating they lack the workforce necessary to meet their cybersecurity objectives. The cyber skills gap increased by 8% in 2024. “It’s critical we help close the growing cyber skills gap with a focus on training, reskilling, recruiting, and retaining cybersecurity talent,” said Chuck Robbins, chair and chief executive officer of Cisco. Resonating the same, Publicis Sapient also recognises that safeguarding privacy requires more than just technology—it demands a workforce equipped with advanced skills and a mindset of continuous learning. “By investing in reskilling initiatives, particularly for AI engineers and cybersecurity experts, we aim to empower our people to design solutions that embed privacy by design and anticipate emerging risks. This culture of continuous learning ensures that our people are not just problem-solvers but forward-thinkers who can address tomorrow’s challenges today,” said Amit Patil, senior director of technology at Publicis Sapient.
While two-thirds of companies recognise that AI will significantly impact cybersecurity this year, only 37% have the tools to assess and address AI-related security threats effectively.
While two-thirds of companies recognise that AI will significantly impact cybersecurity this year, only 37% have the tools to assess and address AI-related security threats effectively.
["data privacy India"]
["Go", "API", "AWS", "AI", "Git", "data privacy India", "RAG", "Aim", "Rust", "edge computing", "R"]
["AI", "Aim", "RAG", "AWS", "edge computing", "R", "Go", "Rust", "Git", "API"]
Shalini is a senior tech journalist, exploring the latest advancements in AI. When she's not reporting on the latest innovations, you can find her immersed in her next literary adventure.