Finding a Middle Ground Between Consumer Privacy and Business Needs: An Examination of Data Protection Policies in India's Online Marketplaces

Indian e-commerce has been growing at an exponential rate, which is both great news for digital trade and a major cause for worry about customers' right to privacy and the security of their personal information. An analytical examination of the changing legislative framework controlling privacy and data management in India's e-commerce sector is undertaken in this article. The study analyses the present legislative framework in light of the Digital Personal Data Protection Act, 2023 (DPDPA) and determines if it adequately handles issues related to online platform accountability mechanisms, data processing, cross-border transfers, and consent management. In order to evaluate similarities, differences, and potential areas of harmonisation, it compares the Indian framework to international norms like the General Data Protection Regulation (GDPR) of the EU and the California Consumer Privacy Act (CCPA). In particular, the research delves at the ways in which e-commerce's profit-driving tailored advertising and the monetisation of customer data create an inherent contradiction with consumers' rights. The study examines policy papers, court declarations, and business compliance procedures using doctrinal and comparative legal research methodologies. Its goal is to find the regulatory loopholes that prevent effective enforcement. While the data protection law in India is a major step in the right direction, the paper contends that the law will only be effective if the Data Protection Board is institutionally independent, data-driven business models are more transparent, and the law is vigorously enforced. In order to promote trust, accountability, and long-term growth in India's e-commerce sector, the essay finishes by suggesting a middle ground legislative strategy that protects consumer privacy without limiting digital innovation.