When I began practising, intellectual property in India was a quiet, almost antiquarian field — a matter of trade mark renewals and the occasional copyright skirmish, conducted at the edges of a manufacturing economy that valued machines over ideas. A registration was a formality one attended to, not a strategy one built upon. Few clients believed their imagination had a balance-sheet value; fewer still thought to protect it before it was taken.

That world is gone. The Indian startup has done what decades of policy could not: it has made the idea the principal asset of the enterprise. A young company today often owns nothing one can touch — no plant, no inventory, sometimes not even an office — and yet commands a valuation built almost entirely on intangibles: a brand, a body of code, a method, a dataset, a reputation. The whole of its worth is intellectual property. And so the discipline I once practised at the margins has moved, in a single generation, to the heart of Indian commerce.

An ecosystem, at last

It would be ungenerous not to acknowledge how far the scaffolding has come. The startup of today inherits an apparatus that my early clients could only have wished for: expedited examination of patents and trade marks for recognised startups, rebates on official fees, a corps of empanelled facilitators whose professional charges the State itself underwrites, and an administration that — whatever its backlogs — has at least accepted that the protection of ideas is a public interest, not a private indulgence.

A startup's intellectual property is not the certificate it eventually receives. It is the discipline it practises long before — in what it records, what it restricts, and what it refrains from disclosing.

Yet the apparatus does the founder little good if the founder arrives late. The recurring tragedy of my practice has not been the strong claim defeated, but the good idea left unprotected — the mark used for two years and never filed, the source code written by a contractor whose assignment was never taken, the trade secret shared in a pitch deck circulated without a confidentiality obligation. The ecosystem can register what you bring to it. It cannot manufacture the rights you neglected to secure.

The second estate: data, and the long arm of Europe

If the first estate is what the startup creates, the second is what it comes to know. Here a newer body of law has arrived to sit alongside the old, and the two do not always sit easily together. A company built in Bengaluru that serves a single customer in Berlin finds itself within the reach of the European Union's General Data Protection Regulation — a statute that follows the data subject across borders and asks of the Indian enterprise the same accountability it demands of a Frankfurt bank.

This extraterritorial pull is no longer exotic; for any startup with global ambitions it is the ordinary condition of doing business. And it produces a peculiar tension with the instincts of intellectual property. The IP lawyer's reflex is to hold — to gather data, to treat the database as a proprietary asset, to guard the algorithm as a trade secret. The data-protection regime's reflex is to account — to collect only what is necessary, to explain its use, to delete it on request, to surrender it to the very subject from whom it was gathered.

The founder must therefore hold both reflexes in mind at once, and reconcile them deliberately:

  • A dataset may be a protectable asset and a regulated liability in the same breath; its value and its risk grow together.
  • A trade secret asserted over personal data does not extinguish the data subject's rights over that data — the two claims coexist, and must be drafted to coexist.
  • Cross-border transfer of data is now an IP question as much as a privacy one, because the asset and its lawful movement are inseparable.
  • India's own Digital Personal Data Protection Act, 2023 brings the domestic regime closer to the European one, narrowing the distance a startup must travel to be compliant in both.

A counsel's conclusion

If I have learned one thing in forty years, it is that intellectual property rewards foresight and punishes haste with a consistency that borders on the moral. The startup that prospers is rarely the one with the cleverest idea; it is the one that treated its ideas, and its data, as estates worth governing from the first day — assigning what it commissioned, registering what it adopted, restricting what it disclosed, and accounting honestly for what it collected. The certificates and the compliance reports come later. The discipline that earns them must come at the beginning, or it does not come at all.

This commentary is provided for general informational purposes only. It reflects the author's view of the law at the time of writing, does not constitute legal advice, and should not be relied upon in any specific matter. The interaction of intellectual property and data-protection law is fact-sensitive and jurisdiction-specific; for advice on your circumstances, please consult a qualified advocate. Reading this note does not create a lawyer–client relationship with RDB Associates.