INTRODUCTION

Data localisation mandates that certain data be stored or processed within national borders. While India justifies it on grounds of sovereignty, security, and regulatory access, it raises concerns about digital protectionism and global data fragmentation, especially under the DPDP Act, 2023.

RATIONALE FOR DATA LOCALISATION

National Security and Law Enforcement

• Ensures easier access for investigative agencies
• Reduces dependence on foreign jurisdictions for data requests

Regulatory Oversight and Data Sovereignty

• Strengthens state control over citizens’ data
• Enables effective enforcement of domestic laws

Economic Considerations

• Promotes domestic data infrastructure and digital economy growth

RISKS AND CRITICISMS

Fragmentation of Global Digital Economy

• Restricts free cross-border data flows, increasing transaction costs
• Leads to “data silos” and inefficiencies in global value chains

Impact on Innovation and Competitiveness

• Raises compliance costs for startups and MSMEs
• Limits access to global cloud services and AI ecosystems

Trade Barriers and Protectionism Concerns

• Perceived as non-tariff barriers in digital trade
• May deter foreign investment in India’s digital sector

DPDP ACT, 2023: A BALANCED APPROACH?

Flexible Data Transfer Framework

• Allows cross-border data transfers to “notified countries”
• Moves away from strict localisation mandates of earlier drafts

State Discretion and Uncertainty

• Broad government powers to restrict transfers
• Lack of clarity may create regulatory unpredictability

Compliance Burden

• Obligations on data fiduciaries may increase operational costs

IMPLICATIONS FOR INDIA–US TRADE RELATIONS

Areas of Friction

• U.S. firms favour free data flows and oppose localisation
• Concerns over market access and regulatory barriers

Scope for Cooperation

• DPDP’s flexible framework opens space for data transfer agreements
• Alignment with global standards (e.g., interoperability frameworks) possible

Strategic Balancing

• India seeks to protect sovereignty while engaging in digital trade negotiations (e.g., IPEF)

CONCLUSION

While data localisation serves legitimate state interests, excessive restrictions risk undermining India’s digital trade ambitions. The DPDP Act reflects a calibrated approach, but its implementation will determine whether India can balance sovereignty with global integration, particularly in its evolving trade relationship with the United States.