The Telecom Regulatory Authority of India's (Trai’s) recommendations on data ownership, privacy and purpose limitation have clearly been inspired by the European Union’s General Data Protection Regulation (GDPR). The ‘Right to be forgotten’ is being introduced as a concept for the first time in India as is the idea of 'privacy by design', along with granular end-user license agreements. For that matter, the basic unequivocal statement that data belongs to the individual who created it, with digital businesses being mere custodians, goes a step ahead than any previous statement by an Indian regulator. As working principles for crafting a framework

