Working with “Last Mile” Data Protection in India
Asie.Visions, No. 96, November 2017
India’s digital economy is characterized by “last mile” data protection, with privacy norms, data collection and sharing standards being set at the level of the application (“app”), operating system (OS) and the device. This practice lends itself to multiple, often crisscrossing rules maintained by smartphone manufacturers, mobile operating system vendors and application developers. The user is caught in a maze of privacy policies that bear on important questions: what data is collected, where it is stored, who it is shared with, and legal recourse in the face of policy violations or unauthorized use of data by third parties.
Contributing to the confusion is the lack of statutory or regulatory clarity on data protection. India’s own data protection rules offer wide latitude to technology companies to determine their own practices, which encourage irregular and poorly enforced privacy policies. If regulatory ambiguity has opened the door for conflicting data protection guidelines, the problem is compounded by India’s heavy reliance on foreign devices and applications, many of which transfer data of Indian users outside India’s borders and base their privacy policies on their home jurisdictions. This system of “last mile” data protection significantly diminishes the state’s ability to protect the privacy of its citizens, a right that was recently confirmed as “inalienable” by the Supreme Court of India.
This paper highlights “last mile” protection through an analysis of policies at the app, OS and device layer — using the examples of the Google Play Developer Distribution Agreement, Google Developer Policy, the India-specific privacy policies of smartphone manufacturers Huawei, Vivo and Xiaomi, as well as the privacy policy of WhatsApp. While acknowledging that such policies are here to stay and that it may not be feasible to craft statutory guidelines that comprehensively address every dimension of data sharing and collection, given the diversity in technological platforms, the paper makes the case for a self-regulating, autonomous and multi-stakeholder agency for protecting the integrity of user data.
Available in:
Regions and themes
ISBN / ISSN
Share
This page contains only a summary of our work. If you would like to have access to all the information from our research on the subject, you can download the full version in PDF format.
Working with “Last Mile” Data Protection in India
China’s Climate Leadership after Hormuz: How Should Europe Adjust?
The effective closure of the Strait of Hormuz in early 2026 offered an unplanned stress test of China’s approach to energy security, and China passed it far better than most expected. The episode demonstrated that the underlying risk of supply disruption is real, while validating a preference for resilience and resource security that has long underpinned Chinese energy and climate policy and has now been reinforced under the banner of building an “energy powerhouse.”
China as an ambivalent supporter of the WTO and the multilateral trading system
Amid rising trade tensions between Europe and China and broader uncertainty in the international rules-based trade regime, Beijing has worked to preserve and bolster the multilateral trading system while at the same time failing to reform the domestic policies that have served to undermine that same system.
Pakistan and the Israel-Palestine Conflict: Transformation in Pakistan’s Approach After the War in Gaza
Pakistan has long combined vocal support for the Palestinian cause with covert engagement with Israel. Since the war in Gaza, this balance has become untenable: public opinion is united against Israel, joining Trump’s Board of Peace has drawn rare cross-party criticism, and new regional alignments put normalization out of reach.
The Oceania Factor in France’s Evolving Indo-Pacific Strategy
This paper examines the two-way relationship between France’s Indo-Pacific strategy and developments in Oceania. Oceania was not a priority in the initial years of France’s Indo-Pacific strategy, as the region was largely treated as secondary to major strategic hotspots and key partnerships, while overseas territories were primarily handled as domestic issues and recipients of a top-down strategy.