Blog
Practical writing on DPDP compliance for Indian businesses.
Checklists, comparisons, and roadmaps — written for founders, COOs, and heads of compliance who need to act, not just read.
DPDP vs GDPR: 7 Differences That Will Trip Up Indian Startups
If you've ported a GDPR program to India, here's where the DPDP Act diverges — consent architecture, cross-border transfers, significant data fiduciary thresholds, and breach notification timelines.
Common DPDP Mistakes Startups Make in the First 90 Days
Five recurring mistakes we've seen across SaaS, fintech, and HR tech — and the inexpensive fixes that close roughly 60% of your real regulatory exposure.
Vendor Compliance Under DPDP: A Practical Playbook
How to inventory your vendors, classify processor risk, and update DPAs without burning legal hours you don't have. Templates and negotiation tactics included.
HR Data Privacy Obligations Under India's DPDP Act
Employee data is in scope. Here's what HR and ops leaders need to operationalize — from offer letter to exit interview — without paralyzing the business.
DPDP Readiness Roadmap 2026–2027
An 18-month implementation roadmap for mid-size Indian businesses — quarter-by-quarter, with realistic budgets, headcount asks, and milestone-level deliverables.
Consent Under DPDP: Why 'Accept All' Banners Will Hurt You
Granular, informed, revocable. We break down what a defensible consent system looks like in 2026 — and why the cookie banner pattern from 2019 GDPR is the wrong reference.
Breach Notification: Your First 72 Hours Under DPDP
A practical incident response timeline mapped to DPDP's notification obligations. Who to call, what to document, and how to avoid the mistakes that turn incidents into investigations.
Significant Data Fiduciary: Are You One Without Knowing It?
The thresholds, the obligations, and the practical signals that you're operating like an SDF — even before formal designation. Includes a self-assessment.
One DPDP brief a month. No fluff.
A short, opinionated monthly note on what changed in DPDP enforcement, what we're seeing across client engagements, and what to do about it.
DPDP-grade handling. Unsubscribe anytime.