Social media platforms collect vast personal data, through lengthy terms and conditions that users accept without understanding. Globally, laws like the General Data Protection Regulation (GDPR), California's CCPA have set high standards for consent and user rights. India, through the Digital Personal Data Protection Act (DPDP) of 2023, has introduced its own framework, recognizing privacy as a fundamental right following the landmark Puttaswamy v. Union of India judgment. It highlights how Indian law addresses challenges of meaningful consent, dark patterns, and data collection practices in comparison to global norms. It shows that while the DPDP Act introduces requirements for notice, limitation, and user control, gaps remain in enforcement. The paper argues that India's privacy framework is at a crossroads: it must strengthen safeguards against exploitative practices while aligning with global best practices. The paper concludes that clearer rules, stronger accountability, and user-friendly consent mechanisms are essential for protecting autonomy in India's social media ecosystem.