Expert articles on DPDP compliance, IP law, cyber law, and legal advisory for Indian businesses
The DPDP Act gives children's personal data special protection, including verifiable parental consent and a ban on tracking and targeted advertising. Here is what organisations must do.
Employee and HR data is personal data too. Here is how the DPDP Act applies to the employee lifecycle, the lawful bases you can rely on, and what employers should put in place.
When a vendor processes personal data for you, the DPDP Act requires a valid contract. Here is what a data-processing agreement should cover and how to manage processor risk.
You cannot keep personal data forever. The DPDP Act requires erasure when consent is withdrawn or the purpose is served. Here is how retention and erasure work, and how to get it right.
A Record of Processing Activities (RoPA) is the map of what personal data you hold, why, and with whom. Here is what a RoPA is, why it matters under the DPDP Act, and how to build one.
A Data Protection Impact Assessment (DPIA) helps you identify and reduce privacy risks before they materialise. Here is what a DPIA is, when it is required under the DPDP Act, and how to run one.
Consent is a primary lawful basis under the DPDP Act, and it comes with strict conditions. Here is what valid consent looks like, how withdrawal works, and how to manage consent properly.
A personal-data breach must be handled fast and correctly under the DPDP Act, including notification. Here is what counts as a breach, your notification duty, and how to prepare a response plan.
Everything Indian businesses need to understand about the Digital Personal Data Protection Act, 2023 — who it applies to, the key obligations, data-principal rights, penalties, and a practical path to compliance.