Oracle India Mass Layoffs: DPDPA Rights and Recourse

Oracle conducted its largest single-country workforce reduction in India, affecting thousands of engineers and support staff across Bangalore, Hyderabad, and Pune offices. The layoffs coincided with Indias implementation of the Digital Personal Data Protection Act, creating a complex legal landscape for affected employees seeking to exercise their new data rights. Former employees reported that Oracle India HR refused to process data access requests, claiming the DPDPA implementation timeline exempted them from immediate compliance. Privacy lawyers in India pushed back, noting that many provisions of the Act were already in force and that Oracle as a multinational data fiduciary had obligations under multiple jurisdictions simultaneously. The Indian IT workers union documented cases where employees were asked to sign broad data waivers as a condition of receiving severance packages, effectively trading their privacy rights for financial compensation. Several terminated employees discovered that Oracle continued processing their Aadhaar numbers and PAN card details months after termination, despite having no ongoing employment relationship or legitimate business purpose for retention.

The ramifications of this incident extend beyond the immediate data exposure. Privacy regulators in multiple jurisdictions have opened investigations, and affected individuals are organizing collective action to demand accountability and meaningful remediation. The case highlights systemic weaknesses in how organizations handle personal data and the gap between corporate privacy promises and operational reality.

For impacted individuals, immediate action is critical. Filing a data subject access request forces the company to disclose exactly what data they hold about you, providing the foundation for deletion requests, regulatory complaints, and potential legal action. Below, we outline the specific data types at risk and the concrete steps you can take to protect yourself.