Practical, board-ready commentary on India's Digital Personal Data Protection Act — written for founders, general counsel and compliance leaders.
A plain-English walkthrough of India's Digital Personal Data Protection Act — who it applies to, what changes, and what founders must do first.
How to draft a DPDP-compliant notice and consent flow — with the seven elements every notice must contain.
Access, correction, erasure, grievance redressal and nomination — what each right means and the SLAs you should design for.
The DPDP Act flips the model — transfers are allowed by default, except to notified 'negative-list' countries. Here's how to prepare.
Every Data Fiduciary must notify the Data Protection Board and affected Data Principals of a breach. Here's the workflow to build now.
The government can designate companies as SDFs based on volume, sensitivity and risk — triggering additional obligations. Understand the threshold.
Book a consultation with Vrushali Borade to build a compliance roadmap.
Book Consultation