The Personal Data Protection Bill, 2018 is more fully understood in the context of three key developments: the political and legal challenges to Aadhaar, Europe’s General Data Protection Regulation, and the “tech-lash” against the dominance of some of the largest United States-based tech companies at the expense of the domestic industry. In the bill, the interplay between these distinct pieces of context explains why there is work to be done to improve this bill in its journey to becoming a law.