Data rights, surveillance, anonymisation and institutional duties over personal information.
Selective disclosure does not produce privacy by itself when the verifier can request excessive evidence and the holder must repeatedly judge whether disclosure is legitimate.
LLMs do not need to exceed human investigative capability to collapse pseudonymity at scale; they only need to reduce its cost, and that cost reduction is now sufficient to make large-scale deanonymization a routine, automatable threat.
The report’s central insight is that India’s AI bottleneck is not merely lack of data, but lack of a usable legal-operational pathway for iterative model development, effective anonymization, and PET adoption under the DPDP regime.