---
title: "Data protection misconceptions 7: Big tech"
description: Busting 10 DPDPA misconceptions. The DPDPA applies to all companies, not just big tech companies and all need to ensure that they comply.
---

[Blog ](https://www.securys.in/blog)

# [Data protection misconceptions 7: Big tech](https://www.securys.in/blog/data-protection-misconceptions-7-big-tech)

 Written by [Ben Rapp](https://www.securys.in/blog/author/ben-rapp) | Mar 18, 2026 11:05:09 AM

As indicated in previous blogs, we are covering commonly-held misconceptions to provide clarity over what's important to those embarking upon their DPDPA compliance journey. Our particular focus here is on compliance with India’s new Digital Personal Data Protection Act, but it is worth reiterating that the lessons are globally applicable.

In this week's post, we shine the light on the commonly-held view that it is only big tech companies that need to ensure they comply.

Misconception 7: Regulators are only interested in big tech companies

Elsewhere in the world, it’s the hundreds of millions (or even billions) in fines levied against the big US tech companies that get headlines in the mainstream press. In reality, though, data protection enforcement is continuous and applies at all levels. At the time of writing there have been 335 publicly notified fines in Europe in 2025, as well as many more interventions that required process change or improvement without an immediate monetary penalty; of those 335, only 3 were directed at one of the big tech firms. The total fines levied were €1.1bn (about ₹11,360 Cr, an average of ₹34Cr per fine).

Rather watch as a video? Click below.

 

-----------------------------------------------------

**Read our 10 DPDPA misconceptions series**

Interested to read the series in full? Click on the links below.

**[Misconception 1: data protection is all about breach prevention ](https://www.securys.in/blog/busting-dpdpa-misconceptions-1)**

**[Misconception 2: Compliance is just paperwork.](https://app.hubspot.com/blog/8089143/editor/207366312003/content)**

**[Misconception 3: it’s all about consent](https://www.securys.in/blog/data-protection-misconception-3-its-all-about-consent)**

[**Misconception 4: personal data is PII**](https://www.securys.in/blog/personal-data-means-pii)

[**Misconception 5: Consumers don’t care about privacy**](https://www.securys.in/blog/data-protection-misconceptions-5-consumers-dont-care-about-privacy)

[**Misconception 6: No consumers, no problem**](https://www.securys.in/blog/no-consumers-no-problem)

 

Setting off on your DPDPA compliance journey?

If you’d like us to help you achieve DPDPA compliance and transform your data from a risk into an asset, you can [Contact Us](https://www.securys.in/contact-us).

If you are looking for more information regarding DPDPA compliance, visit our [DPDPA resources page.](https://www.securys.in/resources)

 

 

 

 

 

 

 

 

 

 

 

 

 

### Subscribe by email

Email*

We are committed to protecting your privacy. For more information on how we respect your privacy, please review our [Privacy Notice](https://www.securys.co.uk/privacy-policy).

From time to time, we would like to send you marketing communications relating to Securys. If you consent to contact for this purpose, we will never sell or share your data with third parties. We will keep your details on our marketing database until you opt out, which you may do at any time. If you consent to contact for this purpose, please tick the box below.

- I confirm that I would like to receive marketing communications from Securys.

When you submit a contact form through our website, we will collect and store the information you share with us securely in cloud servers in Ireland hosted and managed by a third party. If you consent to us storing your personal data, please tick the checkbox below.

- I agree to allow SecurysUK to store and process my personal data.
  
  *

 

 

[View full post](https://www.securys.in/blog/data-protection-misconceptions-7-big-tech)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Ben Rapp"
  },
  "dateModified" : "2026-03-18T11:05:09.371Z",
  "datePublished" : "2026-03-18T11:05:09Z",
  "headline" : "Data protection misconceptions 7: Big tech",
  "image" : {
    "@type" : "ImageObject",
    "height" : 644,
    "url" : "https://8089143.fs1.hubspotusercontent-na1.net/hubfs/8089143/iStock-1138806825%281%29-1.jpg",
    "width" : 966
  },
  "mainEntityOfPage" : "https://www.securys.in/blog/data-protection-misconceptions-7-big-tech",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Blog"
  }
}
```