The Digital Shield or The Surveillance Sword? Unmasking The Digital Personal Data Protection Act, 2023

In an era where data is power and surveillance lurks behind digital convenience, the Digital Personal Data Protection Act, 2023 emerges as India's most ambitious attempt to regulate personal data. But beneath its promises of empowerment and privacy lies a stark paradox: while the law equips citizens with new rights, it simultaneously grants the State sweeping exemptions, unchecked access, and opaque authority. This research dissects the DPDPA’s evolution, its core provisions, and the constitutional tensions it creates—juxtaposing its protective aspirations against its potential to legitimize mass surveillance. Drawing comparisons with global standards and earlier drafts, the paper asks the central question: Is the DPDPA truly a digital shield safeguarding Indian citizens, or a surveillance sword veiled in legalese? As India races to become a global digital powerhouse, the answer will determine whether privacy remains a constitutional cornerstone—or a casualty of national ambition. The battle for India’s digital soul has just begun.