Settlement strategies in data driven disputes

Introduction

Settlement strategies in data-driven disputes refer to legal and practical methods used to resolve disagreements involving the collection, processing, storage, sharing, ownership and use of digital information. Such disputes commonly arise between technology companies, research institutions, healthcare organisations, pharmaceutical manufacturers, data processors and government authorities.

In biotechnology and healthcare, data-driven disputes may involve unauthorised use of genetic information, disclosure of patient records, inaccurate clinical trial datasets, intellectual property claims, cybersecurity incidents or disagreements over ownership of research data.

The increasing use of artificial intelligence, digital healthcare platforms, electronic medical records and computational research has made data-related disputes more complex. Settlement strategies provide opportunities to resolve these disputes through negotiation, mediation, arbitration, regulatory settlement or court-supervised procedures.

Legal framework in India

1. Digital Personal Data Protection Act, 2023

The Digital Personal Data Protection Act establishes the legal framework for processing digital personal data in India.

Section 8 imposes obligations on Data Fiduciaries concerning lawful processing, security safeguards and personal data breach notifications. Section 27 establishes the functions and powers of the Data Protection Board of India.

Where disputes arise from unauthorised processing, inadequate security safeguards or personal data breaches, the statutory framework provides mechanisms for regulatory examination and enforcement.

However, the Act does not create a general private settlement procedure for every data-related dispute.

2. Information Technology Act, 2000

The Information Technology Act provides legal protection against specified unauthorised activities involving computer systems and digital information.

Section 43 addresses certain unauthorised acts involving computer resources. Section 66 provides criminal consequences where relevant acts are committed dishonestly or fraudulently.

Section 72A addresses disclosure of information in breach of a lawful contract, subject to its statutory requirements.

These provisions are relevant to disputes involving data theft, unauthorised access and unlawful disclosure.

3. Arbitration and Conciliation Act, 1996

The Arbitration and Conciliation Act provides mechanisms for resolving eligible commercial disputes outside ordinary court proceedings.

Data-related commercial disputes may involve disagreements over software licensing, cloud-service contracts, research-data ownership, confidentiality obligations and technology-service agreements.

Parties may use arbitration where a valid arbitration agreement exists and the dispute is legally arbitrable.

4. Indian Contract Act, 1872

The Indian Contract Act governs contractual obligations relating to data processing, confidentiality, intellectual property licensing and technology services.

Sections 73 and 74 are relevant to compensation for contractual breaches and stipulated damages.

A data-processing agreement may therefore provide remedies for unauthorised disclosure, failure to maintain security standards or misuse of confidential information.

Major settlement strategies in data-driven disputes

1. Negotiation and voluntary settlement

Negotiation is often the first method used to resolve commercial data disputes. The parties may discuss the disputed data, contractual responsibilities, financial losses and corrective measures.

For example, a biotechnology research organisation may negotiate with a technology provider over unauthorised use of research datasets. The parties may agree to restrict access, delete unauthorised copies where legally permissible and establish financial compensation.

2. Mediation

Mediation involves an independent neutral person assisting the parties in reaching a mutually acceptable settlement.

The Mediation Act, 2023 provides a statutory framework for mediation in India. It may be useful for disputes involving confidentiality, data-sharing arrangements and commercial relationships.

Mediation is particularly suitable where parties wish to preserve long-term research or technology partnerships.

3. Arbitration

Arbitration is useful for complex commercial disputes involving data ownership, software licensing, cloud infrastructure and contractual confidentiality.

The parties appoint an arbitral tribunal to decide the dispute according to the arbitration agreement and applicable law.

However, disputes involving statutory regulatory powers, criminal liability or rights that cannot legally be settled through arbitration must follow the appropriate legal procedure.

4. Regulatory settlement

Where a dispute involves statutory non-compliance, the organisation may use a settlement or compounding mechanism if the relevant legislation permits it.

For example, eligible proceedings under the Competition Act, 2002 or SEBI Act, 1992 may be resolved through their respective statutory settlement frameworks.

A private agreement between two companies cannot automatically prevent a regulator from investigating a statutory violation.

5. Corrective and preventive settlement

In data-driven disputes, financial compensation alone may not resolve the underlying problem. A settlement may also require:

Restricting unauthorised access to information.

Correcting inaccurate datasets.

Improving cybersecurity safeguards.

Establishing data-retention and deletion procedures.

Conducting independent security audits.

Revising data-sharing agreements.

Providing appropriate notifications where legally required.

These measures help prevent similar disputes from recurring.

Special considerations in biotechnology and healthcare

Data-driven disputes in biotechnology require additional safeguards because research datasets may contain genetic information, clinical trial records and patient-related information.

Settlement agreements should clearly establish the permitted use of data, ownership of research outputs, confidentiality obligations and responsibilities for third-party access.

For example, where a clinical research organisation shares trial data with a pharmaceutical company, the agreement should specify whether the data may be used for further research, regulatory submissions or commercial development.

Parties should also consider whether the disputed information contains personal data, confidential business information or intellectual property protected under separate legislation.

Important judicial decisions

Indian courts have addressed privacy, electronic evidence, confidentiality and arbitration in decisions that provide important principles for data-related disputes.

1. Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)

The Supreme Court recognised privacy as a fundamental right under Article 21 of the Constitution.

The judgment established important constitutional principles concerning informational privacy, personal autonomy and protection against unjustified interference.

It is relevant to data-driven settlements because agreements involving personal information must respect applicable privacy protections. Private settlement cannot automatically validate unlawful processing or disclosure of personal data.

2. Shreya Singhal v. Union of India (2015)

The Supreme Court examined the constitutionality of Section 66A of the Information Technology Act and struck it down for violating freedom of speech and expression.

The judgment is relevant to disputes involving digital platforms, online content and the regulation of electronic communications. It demonstrates that restrictions affecting digital information must satisfy constitutional requirements.

3. Anvar P.V. v. P.K. Basheer (2014)

The Supreme Court examined the admissibility of electronic records under the former Section 65B of the Indian Evidence Act, 1872.

The judgment highlighted the importance of proper certification and evidentiary compliance when relying on electronic records.

Its principles are relevant to data-driven disputes involving emails, digital transaction records and electronic research documentation. The current evidentiary framework is governed by the Bharatiya Sakshya Adhiniyam, 2023.

4. Vidya Drolia v. Durga Trading Corporation (2020)

The Supreme Court examined the principles governing arbitrability of disputes in India.

The judgment explained that certain disputes involving public rights, statutory functions or matters reserved for specialised authorities may not be suitable for private arbitration.

This principle is particularly relevant where data disputes involve both commercial contractual claims and statutory regulatory obligations.

5. Amazon.com NV Investment Holdings LLC v. Future Retail Ltd. (2021)

The Supreme Court considered the enforceability of an emergency arbitrator's order under the Indian arbitration framework.

The judgment is relevant to data-driven commercial disputes because it demonstrates the importance of effective interim protection and enforcement of contractual arbitration arrangements.

Challenges in settling data-driven disputes

Data disputes often involve technical evidence that requires expert examination. Parties may disagree over the origin of information, access logs, database ownership, the extent of unauthorised disclosure or the financial value of misused data.

Cross-border data processing creates further complications because different jurisdictions may impose different legal requirements.

Another challenge is that settlement agreements must not violate statutory obligations. For example, parties cannot privately agree to disregard mandatory personal data breach reporting requirements or prevent a competent authority from exercising its legal powers.

Conclusion

Settlement strategies in data-driven disputes are essential for resolving conflicts involving digital information, privacy, research datasets and technology-based commercial relationships. Indian law provides several mechanisms through the Digital Personal Data Protection Act, 2023, Information Technology Act, 2000, Arbitration and Conciliation Act, 1996 and Mediation Act, 2023. Judicial decisions concerning privacy, electronic evidence and arbitrability provide important guidance for resolving such disputes. Effective settlements should combine financial remedies with data protection, confidentiality safeguards, corrective measures and clear contractual responsibilities. In biotechnology and healthcare, these strategies must also protect research integrity, patient privacy and public interest.