Archive · 14 Jan 2026

India's Data Protection Law Challenges Digital Lenders

India's Data Protection Law Challenges Digital Lenders

India has a new law called the DPDP Act that says apps must make it easy for users to withdraw their consent to share personal data.

Digital lenders, who give out loans, use a lot of personal data to decide who gets a loan and to keep an eye on borrowers.

Now, they are asking for special permission to keep using this data even if a borrower says they don't want to share it anymore.

The lenders say they need this data to manage risk and make sure borrowers pay back their loans.

But some lawyers say the lenders already have other legal reasons to use this data and don't need special permission.

The lenders also use this data to send marketing messages and make better loan offers.

The law says users must be able to withdraw consent easily, but the lenders want to treat some data use as mandatory.

There are also rules about how lenders can access data from borrowers' phones and bank accounts.

Some lenders are trying to find new ways to monitor borrowers' bank balances without breaking the rules.

Sources