Cloud Computing — Tech Evolutions

Entry	Year	Description	Impact
Information Technology (Amendment) Act, 2008	2008	This amendment significantly updated the IT Act, 2000, to address emerging cybercrimes and technological advancements. It introduced new sections related to data protection, cyber terrorism, and enhanced penalties for various offenses. While not directly naming 'cloud computing,' its provisions on data privacy, electronic contracts, and the liability of intermediaries became highly relevant for cloud service providers and users, establishing a legal framework for digital transactions and data handling in the cloud.	Strengthened the legal framework for cybersecurity and data protection in India, indirectly impacting cloud service operations by setting standards for data handling, security practices, and legal recourse in case of cyber incidents. It provided a more robust legal basis for digital transactions that often occur via cloud platforms.
Digital Personal Data Protection Act, 2023	2023	This landmark legislation replaced earlier data protection efforts and established a comprehensive framework for processing digital personal data in India. It defines the obligations of data fiduciaries and data processors (including cloud service providers), outlines the rights of data principals, and sets rules for cross-border data transfers, consent, and data breach notifications. It also established the Data Protection Board of India.	Profoundly impacts cloud computing by mandating strict compliance requirements for CSPs handling Indian citizens' personal data. It necessitates changes in data storage, processing, security protocols, and contractual agreements, especially concerning data residency and accountability. It aims to create a secure and trustworthy digital ecosystem, influencing how cloud services are designed and delivered in India.