Regulatory Frameworks and Digital Trust: Applying Institutional Theory to India's Data Protection Act

Abstract

With the launch of the Digital India Mission, the Indian state-Citizen relationship has not only been re-structured from the Weberian model of a paper-based bureaucracy but has been re-designed as a modern digital state as well. At the heart of this shift are the creation of Digital Public Infrastructure (DPI) such as Aadhaar for biometric identity and the Unified Payments Interface (UPI) for financial transactions that have simplified the delivery of services and minimised corruption. The transition to a ‘digital bureaucracy'—one in which digital systems influence decision-making processes more and more—has, however, required a strong regulatory response to new risks to data privacy, cyber security and surveillance. The Digital Personal Data Protection (DPDP) Act of 2024 is assessed here in light of the Institutional Theory to gain insight into its role as a pivotal formal institutional juncture, focused on creating "digital trust".This theoretical perspective is useful in identifying that the effectiveness of the DPDP Act is sometimes undermined by ‘path dependency’ and informal institutional obstacles. The Act gives the formal accountability framework, but it is undermined by a deep reluctance to change amongst bureaucracy who might worry about losing discretion or the light of automated procedures. Moreover, there is a huge digital literacy deficit with over 90% of the population lacking the technical skills to navigate complex consent processes, or understanding their rights concerning data privacy. The paper focuses on the need to reconfigure the legal and behavioral frameworks surrounding the data of citizens, not simply to make a legal or technological tweak. The study concludes that if India is able to align the DPDP Act with its internal cultural reforms such as the transformation of the civil service from a ‘rule-based' to a ‘role-based' approach, it will move towards a more transparent, accountable and ethically sound governance structure.