Rights of Data Principals in the Era of Artificial Intelligence: Evaluating the Adequacy of the Digital Personal Data Protection Act, 2023

The growing integration of Artificial Intelligence (AI) into contemporary digital ecosystems has fundamentally transformed the manner in which personal information is collected, processed, and utilized. AI-powered technologies increasingly influence decisions relating to employment, education, healthcare, financial services, and public administration. While these innovations contribute to efficiency and technological advancement, they also create significant concerns regarding privacy, informational autonomy, transparency, and accountability. As AI systems depend heavily on large volumes of data , the protection of individuals' rights over their personal information has become a critical legal and policy concern. India's Digital Personal Data Protection Act, 2023 (DPDP Act) establishes a statutory framework governing the processing of digital personal data and recognizes various rights of data principals. These rights are intended to provide individuals with greater control over their personal information and to promote responsible data governance. However, the emergence of AI-driven technologies raises questions about whether the existing legal framework is capable of addressing challenges such as algorithmic profiling, opaque decision-making processes, and large-scale automated data processing. This paper critically examines the adequacy of the rights available to data principals under the DPDP Act, 2023 in the context of artificial intelligence. The study adopts a doctrinal and analytical approach by examining legislative provisions, judicial developments, policy documents, and selected international regulatory frameworks. The analysis reveals that although the Act provides an important foundation for data protection in India, it does not comprehensively address several AI-specific concerns, including explainability, algorithmic accountability, and safeguards against automated decision-making. The paper argues that strengthening the existing framework through targeted regulatory reforms would enhance the protection of data principals and ensure that data governance mechanisms remain effective in an increasingly AI-driven environment.