The 2026 Tech Law Tipping Point: SC Refuses DPDP Stay While Delhi HC Hands OpenAI a ‘Fair Dealing’ Pass

If there was any lingering hope among corporate counsel that India’s technology and privacy frameworks would remain in a state of suspended animation, 2026 has violently dispelled it. In two distinct but equally monumental developments, the Supreme Court has effectively forced India Inc. to swallow the Digital Personal Data Protection (DPDP) Act, 2023, while the Delhi High Court has thrown a massive, controversial wrench into how intellectual property lawyers must handle Artificial Intelligence.

For practicing lawyers, the message from the bench is clear: the grace period is over. It is time to start advising clients on the law as it operates today, rather than the law as we hope it might be interpreted tomorrow.

The AI Copyright Bombshell: Stretching Section 52(1)(a)

Let’s start with the intellectual property earthquake. In August 2026, the Delhi High Court delivered a prima facie ruling in the high-stakes dispute between Asian News International (ANI) and OpenAI. ANI alleged that OpenAI was unlawfully scraping its copyrighted news content to train its Large Language Models (LLMs). The High Court, however, refused to grant an injunction, holding that OpenAI’s storage and use of the literary works for AI training fell under the "fair dealing" exception for "private or personal use, including research" under Section 52(1)(a) of the Copyright Act, 1957.

This is a staggering judicial interpretation that every IP litigator needs to scrutinize. Equating the scraping of millions of data points to build a multi-billion-dollar commercial LLM with "research" is a pro-tech judicial gamble that severely stretches statutory intent.

To classify the systematic, automated, and highly commercialized ingestion of copyrighted databases by OpenAI as "research" under Section 52(1)(a) effectively neuters the economic rights of content creators. It imports a Silicon Valley "fair use" ethos into an Indian statute built on much narrower "fair dealing" exceptions.

What this means for your practice: If you represent media houses, publishers, or database owners, traditional infringement suits against AI companies just got infinitely harder to win at the interim stage. You can no longer rely on a straightforward reproduction right violation under Section 14. Instead, IP lawyers must now prepare to argue the qualitative and quantitative thresholds of "commercial research" versus "technological exploitation." Expect a rush to draft tighter website Terms of Service, deploy anti-scraping technological protection measures (TPMs), and explore breach of contract claims rather than relying solely on the Copyright Act.

The DPDP Juggernaut: No Stay, No Excuses

While IP lawyers are scrambling to understand the new AI landscape, privacy professionals are facing their own day of reckoning. On February 16, 2026, the Supreme Court issued notice on petitions challenging the constitutional validity of the DPDP Act, 2023 and the subsequent 2025 Rules. Crucially, the Apex Court flatly refused to stay the operation of the Act.

The core of the constitutional challenge revolves around the DPDP Act’s amendment to the Right to Information (RTI) Act, 2005. Specifically, the amendment dilutes Section 8(1)(j) of the RTI Act, creating a blanket exemption on the disclosure of "personal information," which activists argue shields the government from accountability. Recognizing the gravity of this, the Supreme Court referred the RTI amendment challenge to a larger bench. But by refusing an interim stay on the DPDP Act itself, the Court has given the government the green light for its phased enforcement rollout, culminating in May 2027.

What this means for your practice: Advising clients to "wait and watch" because the DPDP Act is sub judice is now bordering on professional negligence. The compliance clock is ticking loudly.

The regulatory transition is shifting from legislative debate to hard-nosed compliance, particularly around Section 6 (Consent). The Act demands that consent be "free, specific, informed, unconditional, and unambiguous." Consequently, corporate lawyers must immediately pivot to auditing their clients' consent architectures. If a client's user interface uses pre-ticked boxes or bundles privacy consent with broader terms of service, they are already on the wrong side of the law.

The Dual-Reporting Nightmare for Regulated Entities

The practical friction of this rollout is most visible in the fintech and banking sectors. Industry reporting reveals that banks are currently accelerating their privacy gap assessments. Tech lawyers advising regulated entities are now facing a jurisdictional hydra.

When a data breach occurs, a bank doesn't just answer to the new Data Protection Board (DPB). They must navigate a tortuous dual-reporting mechanism: notifying the sectoral regulator (like the RBI), reporting to CERT-In within the draconian 6-hour window under the IT Rules, and now fulfilling obligations under the DPDP framework. Synchronizing these incident response playbooks so that a statement made to CERT-In doesn't trigger punitive action by the DPB is the most urgent drafting task for any in-house counsel or external privacy consultant in 2026.

The Bottom Line

We are witnessing the rapid maturation of Indian technology law. The Delhi High Court’s OpenAI ruling shows a judiciary willing to bend older IP statutes to accommodate disruptive technology, while the Supreme Court’s refusal to stay the DPDP Act signals an intolerance for delaying the country's data governance regime.

For lawyers, the theoretical debates of 2023 and 2024 are dead. 2026 is about operationalizing compliance, overhauling contracts, and preparing for a deeply complex litigation environment where privacy, constitutional rights, and intellectual property inevitably collide.