1. Introduction

Data Duplication Conflict Rules refer to the legal principles used to resolve disputes arising when the same data, digital record, database, document, or dataset exists in multiple copies, is reproduced without authorisation, appears inconsistently across systems, or is claimed by competing parties.

The term is not the name of one universally recognised legal doctrine. Instead, it encompasses several overlapping areas of law, including:

Intellectual property and database copyright.

Data protection and privacy.

Electronic evidence and authenticity.

Contractual ownership, licensing and confidentiality.

Cybercrime, unauthorised access and data theft.

Competition law and data portability.

Conflicts between domestic and foreign data laws.

For example, a pharmaceutical company may discover that a research database has been copied by a former employee, duplicated by a cloud service, and transferred to a competitor. The legal questions include whether the copying was authorised, whether the information is confidential, whether personal data is involved, which copy is authentic, and which court has jurisdiction.

In India, the legal outcome depends on the nature of the data, how it was acquired, the purpose of duplication, the rights of affected persons, and the statutory framework applicable to the dispute.

2. Principal legal rules governing data duplication

Rule 1: Copyright and originality

A person cannot automatically claim copyright over every fact or item of data. Protection may exist for original expression, selection, arrangement, or a sufficiently original compilation.

Rule 2: Confidentiality and trade secrets

Data may be protected against unauthorised copying or disclosure even when copyright does not cover the underlying facts, particularly where confidentiality obligations apply.

Rule 3: Data integrity and provenance

Duplicate records must be assessed for accuracy, source, timestamps, integrity, and the possibility of alteration. A duplicate is not automatically false or legally invalid.

Rule 4: Privacy and lawful processing

Copying personal data creates separate questions about the legal basis for processing, purpose limitation, security, disclosure, retention, and applicable data-subject rights.

Rule 5: Evidence and judicial balancing

Courts must determine whether duplicated electronic records are authentic and relevant while balancing disclosure requirements against privacy, confidentiality, and fair-trial rights.

3. Important Indian statutory provisions

Important qualification: These laws do not establish one universal rule that the first, newest, or most complete data copy always prevails. The applicable provision depends on the particular legal conflict. For example, unauthorised access under the IT Act is a different issue from copyright infringement or a privacy violation.

The Digital Personal Data Protection Act's substantive obligations should be applied with reference to the relevant commencement notifications and any applicable transitional arrangements, rather than assuming every provision is operative at the same time.

4. Landmark case laws on data duplication conflicts

Case 1. Eastern Book Company v. D.B. Modak, (2008) 1 SCC 1

Court: Supreme Court of India

Legal issue: Whether copying a compilation of judicial decisions infringes copyright when the underlying judgments are public documents.

Principle established: Copyright protection requires sufficient originality. Mere labour, expenditure, or mechanical reproduction does not automatically establish copyright in every element of a compilation.

Application to duplication rules:

Publicly available facts and judicial decisions are not automatically subject to exclusive ownership merely because someone collected them.

Original editorial contributions, selection, arrangement, or other qualifying expression may receive protection.

A dispute must distinguish between copying unprotected underlying information and reproducing protected original material.

Legal significance: This is a central Indian authority for distinguishing legitimate reuse of information from copyright infringement involving duplicated databases.

Case 2. Navigators Logistics Ltd. v. Kashif Qureshi, CS (COMM) 735/2016, decided 17 September 2018

Court: Delhi High Court

Legal issue: Whether a compilation or database can receive copyright protection without sufficient authorship and originality.

Principle: The court addressed the need for human authorship and sufficient skill and judgment in a compilation. The decision highlights the limits of asserting copyright over databases consisting largely of collected information.

Application:

A company alleging that a competitor duplicated its database must establish the legal basis of its rights. It should identify the protected material and demonstrate what was copied, rather than relying exclusively on the fact that it spent money collecting the data.

This case is particularly relevant to customer databases, business directories, logistics records and large-scale data aggregation.

Oxford Academic+1

Case 3. Burlington Home Shopping Pvt. Ltd. v. Rajnish Chibber, 1995 PTC (15) 278

Court: Delhi High Court

Legal issue: Whether a commercially developed compilation of addresses can constitute a protected literary work.

Principle: A compilation created through the investment of time, labour and skill may qualify for protection where the legal requirements for copyright are satisfied.

Application to data duplication:

Suppose a business builds a specialised customer directory and a competitor reproduces that directory. The dispute would require examining the originality of the compilation, the material actually taken, and any applicable confidentiality or contractual restrictions.

The case should not be read as establishing that every collection of customer names or factual records is automatically protected by copyright.

State of Data Regulation in India+1

Case 4. Himalaya Drug Company v. Sumit, Suit No. 1719 of 2000, reported at 126 (2006) DLT 23

Court: Delhi High Court

Legal issue: Copying and reproducing online herbal and healthcare information compiled by another business.

Principle and significance: The dispute is frequently discussed in Indian database-protection literature as an example of judicial intervention against copying of an online database and the effort invested in its development.

Application:

A competitor cannot assume that online availability authorises wholesale copying.

Copyright, confidentiality, and other applicable legal protections must be considered separately.

Evidence of substantial reproduction, access to the source database, and the nature of the material taken can be important.

The precise cause of action and relief depend on the pleadings and the rights established in the particular case.

State of Data Regulation in India+1

Case 5. Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1

Court: Supreme Court of India, nine-judge Constitution Bench

Legal issue: Whether privacy is a constitutionally protected fundamental right.

Principle: Privacy is protected under Article 21 and other relevant freedoms and liberties under Part III of the Constitution.

Application to duplicate personal data:

Duplicating personal data can create privacy risks even if the duplicate is technically identical to the original. A new copy may be disclosed to additional recipients, retained longer, combined with other datasets, or used for a different purpose.

For example, a medical provider may maintain two copies of a patient's records. The existence of two copies is not inherently unlawful. However, their use, disclosure, security and retention must comply with applicable legal obligations.

Legal significance: The judgment supplies the constitutional foundation for assessing government collection, retention, sharing and use of personal information. It does not establish a blanket prohibition on copying personal data.

Sci API+1

Case 6. P. Gopalkrishnan @ Dileep v. State of Kerala, (2020) 9 SCC 161

Court: Supreme Court of India; judgment delivered on 29 November 2019.

Legal issue: Whether an accused person should receive a cloned copy of electronic material used as evidence when disclosure may affect the privacy of a victim.

Principle: Electronic records can constitute documents for evidentiary purposes. The Court balanced the accused's right to a fair trial against the victim's privacy interests.

It held that an accused should ordinarily receive a cloned copy of electronic material relied upon by the prosecution, while recognising that privacy-sensitive cases may justify controlled inspection or independent expert examination instead.

Application to data duplication conflicts:

This case demonstrates that a technically exact duplicate can still create a legal conflict. The relevant question is not merely whether the copy is accurate, but whether its creation and disclosure are justified and subject to appropriate safeguards.

Possible safeguards include:

Supervised inspection of the original material.

Examination by an independent forensic expert.

Restrictions on access to sensitive portions.

Appropriate protective directions from the court.

Legal significance: This is one of the most directly relevant Indian Supreme Court decisions for conflicts involving cloned electronic records, privacy and access to evidence.

LawDistill+1

Case 7. Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal, (2020) 7 SCC 1

Court: Supreme Court of India

Legal issue: What requirements apply to the admissibility of electronic records produced as computer output under the former Indian Evidence Act, 1872?

Principle: The Court reaffirmed the statutory certification requirements under Section 65B for electronic records produced as computer output, subject to the distinctions recognised in the judgment concerning original electronic records and the applicable evidentiary framework.

Application to duplicate records:

Where a party produces a copied email, exported database, call-detail record, CCTV file or other electronic output, the party must establish admissibility under the applicable evidence law. A duplicate does not become reliable evidence merely because it looks identical to the original.

For proceedings governed by the current law, the relevant framework is the Bharatiya Sakshya Adhiniyam, 2023, particularly Sections 61–63. The earlier decision remains important for understanding electronic-evidence principles, but the new statutory provisions must be applied to the current proceeding.

IndiaCode+1

Case 8. Capitol Records, LLC v. ReDigi Inc. , 910 F.3d 649 (2d Cir. 2018)

Court: United States Court of Appeals for the Second Circuit

Legal issue: Whether transferring a lawfully acquired digital music file through a resale platform infringed the reproduction right.

Principle: The court held that the digital transfer process at issue created a new phonorecord and infringed the reproduction right; the first-sale doctrine did not authorise that reproduction.

Application: This illustrates the difference between transferring control of an existing physical object and making a new digital copy. The fact that one copy is deleted or that the total number of copies remains constant does not necessarily eliminate copyright liability.

Jurisdictional qualification: This is a United States decision, not binding precedent in India. It is useful for comparative analysis of digital duplication and reproduction rights.

4th Edition

5. Rules for resolving conflicting duplicate records

When two or more copies conflict, the appropriate legal analysis depends on the type of dispute.

A practical decision-making framework

1

Identify the data

Determine whether the material consists of facts, original expression, personal data, confidential information, business records or electronic evidence.

2

Establish provenance

Examine source systems, creation dates, modification history, access logs, checksums or cryptographic hashes, and any available chain-of-custody documentation.

3

Identify the competing rights

Determine who created, collected, licensed or lawfully controls the information, and whether individuals or third parties have independent rights.

4

Apply the relevant law

Assess copyright, contract, confidentiality, privacy, cybersecurity and evidentiary rules separately rather than treating every duplication dispute as an ownership question.

5

Choose a proportionate remedy

Consider correction, restricted access, controlled inspection, deletion of unauthorised copies, preservation of evidence, licensing, injunctions or damages as appropriate.

6. Application to biotechnology and healthcare databases

Data duplication disputes are particularly important in biotechnology because a single dataset may contain commercially valuable research, confidential experimental results and sensitive personal or genomic information.

Consider a hypothetical dispute involving a biotechnology company whose clinical-trial database is copied to a former employee's personal cloud account.

Three distinct legal questions arise:

Commercial rights: Was the database protected by copyright, confidentiality obligations or a valid contract?

Personal data: Did the copying or subsequent use involve unlawful processing or inadequate protection of participants' personal information?

Scientific integrity: Which version contains the authoritative trial records, and can any discrepancy be explained and verified?

The appropriate solution may require preserving the original records, restricting unauthorised access, auditing copies, notifying affected parties where legally required, and correcting inconsistencies without destroying evidence.

The Digital Personal Data Protection Act, 2023, has a phased commencement schedule. The notification of 13 November 2025 provides for its principal processing obligations to commence 18 months after publication, on 14 May 2027, unless superseded by a later notification. Therefore, on 4 November 2026, those principal provisions are not yet in force; the provisions already commenced and other applicable laws must be considered separately.

E-Gazette+1

7. Critical legal principles

The following propositions summarise the central lessons of the case law:

Duplication is not automatically infringement. The claimant must establish an applicable legal right and its violation.

Public availability is not unlimited permission. Online accessibility does not necessarily authorise copying a protected compilation or confidential dataset.

Identical copies are not necessarily equally authoritative. Their authenticity, provenance and admissibility may differ.

Privacy rights can restrict disclosure. Even a legitimate request for a copy may require safeguards.

Data ownership is not a single, universal right. Copyright, contractual control, confidentiality, personal-data rights and access rights can coexist.

Remedies should address the actual conflict. A court may order restricted access or controlled inspection instead of unrestricted disclosure or destruction.

8. Conclusion

Data Duplication Conflict Rules are best understood as a collection of legal principles governing the reproduction, use, accuracy, disclosure and evidentiary status of duplicated information.

Indian law does not establish a universal priority rule under which the original, earliest, newest or most complete copy automatically prevails. The outcome depends on the nature of the data, the rights asserted, the legality of the copying, the reliability of the evidence and the statutory framework applicable to the dispute.

The most useful starting authorities are Eastern Book Company v. D.B. Modak for copyright and originality, Puttaswamy for privacy, P. Gopalkrishnan v. State of Kerala for cloned electronic evidence and privacy safeguards, and Arjun Panditrao Khotkar for electronic-record admissibility.

For a deeper legal analysis, the next useful step would be to examine Data Duplication Conflict Rules under Indian law specifically, with statutory provisions, case citations, and remedies organised by copyright, privacy, cybersecurity and electronic evidence.