Copyright © 2026 Authors retain the copyright of this article. This article is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

@article{195975,
        author = {Dr. Kavita Jain and Mrs. Aabha Singh Gautam},
        title = {Governing the Data-Driven Bank: DPDPA 2023, IoT Security, and AI Accountability in India’s Financial Sector},
        journal = {International Journal of Innovative Research in Technology},
        year = {2026},
        volume = {12},
        number = {11},
        pages = {2029-2035},
        issn = {2349-6002},
        url = {https://ijirt.org/article?manuscript=195975},
        abstract = {Walk into any bank branch today and you will find technology doing things that were unimaginable a decade ago — sensors tracking footfall, algorithms deciding loan applications within seconds, and smart ATMs that can predict when they will run out of cash. Behind this transformation lies an enormous flow of personal data, and India’s Digital Personal Data Protection Act (DPDPA) 2023 has arrived to govern it. This review paper asks a straightforward but consequential question: are India’s banks ready to comply? Drawing on regulatory analysis, academic literature, and documented deployment evidence, the paper examines how DPDPA 2023’s obligations intersect with the IoT infrastructure and AI systems that now underpin banking operations. We identify five governance gaps and propose a practical five-pillar Data Governance Integration Model (DGIM) that banks can begin adopting today. The paper also surfaces a harder truth: compliance with the letter of the law will not be enough. Banks must embrace privacy as a design value, not a legal checkbox, if they are to earn the trust of the millions of data principals whose financial lives they increasingly mediate through algorithms.},
        keywords = {DPDPA 2023; Data Governance; Banking; AI; IoT; Data Fiduciary; Algorithmic Accountability; India; Privacy by Design; Fintech},
        month = {April},
        }