Recent revelations about cyber-spying and surveillance have highlighted the multiple lacunae in India’s regulatory regime for protecting data privacy. It has been alleged that a Chinese firm, Zhenhua Data Information Technology, keeps tabs on 10,000-odd Indian citizens. There have also been revelations about Facebook misusing permission granted to the app of its subsidiary, Instagram, to track user-activity. TV channels have also released and sensationalised what is claimed to be WhatsApp messages gathered by Indian security agencies investigating Bollywood celebrities. There are several different points worth noting from the above incidents. One is the lack of specific legislation governing the private