Every guide, analysis, and resource you need to navigate India's data protection landscape. One place. Always updated.
Simple meanings for the DPDP words every buyer keeps hearing
Data Fiduciary, Data Processor, Data Principal, consent, notice, grievance officer, Significant Data Fiduciary and the simple checklist. No legal fog.
The business that decides why data is collected and how it is used.
The vendor or tool that handles personal data for the business.
Purpose, proof, withdrawal, and why one checkbox is rarely enough.
The starter map before policy rewrite, vendor purchase, or implementation.
Deep-dive compliance playbooks for your industry
The definitive, exhaustive, long-form analysis of India's Digital Personal Data Protection Act 2023. Everything you need to know in one place.
NBFCs, payment gateways, lending platforms. Consent architecture, KYC data, and RBI intersections with DPDP.
Shopify stores, WhatsApp marketing, customer data. How direct-to-consumer brands get compliant without killing growth.
Zomato/Swiggy data, loyalty programs, delivery addresses. POS systems and third-party data sharing compliance.
The law makes no distinction based on turnover. Even 100 customers makes you a Data Fiduciary. The SME compliance playbook.
Penalties, rights, and the fine print that matters
Real penalty calculations for real companies. Dominos, PhonePe, and what the Board will actually fine.
₹250 Cr per violation →The 7 questions every vendor must answer before you hand them customer data. The due diligence framework.
7-point framework →Access, correction, deletion, grievances. What every Data Principal can demand from any company that holds their data.
Know your rights →Notes from live DPDP client work, published as guides
A DPDP tool with a small monthly licence often carries an implementation bill many times larger. What the setup tax is, why it exists, and what to ask before signing.
Buying Guide →One Accept button covering fifteen data uses is bundled consent. The Supreme Court of India called the model theft of private information, and the DPDP Act requires separate consent per purpose.
Legal Deep Dive →DPDP lets a person withdraw consent at any time. The seconds between the click and your systems stopping are where violations live. The three-step failure chain and how to close it.
Technical Deep Dive →You hired a CA because tax law created an obligation with consequences. A Data Protection Officer is the same decision for personal data. Who needs one under DPDP and how the fractional model works.
Roles →Your existing customer base was collected under old rules. Before DPDP enforcement, every record needs either a proper notice or fresh consent. The two buckets and how to run the campaign.
Migration Guide →The full founder path to DPDP compliance in a fixed order: audit your data, apply the law, change the technology, appoint the officer, fix the paperwork, recapture consent, prepare for breaches.
The Path →Eight DPDP vendor websites, read in one sitting: none prices implementation as a product. The margin arithmetic behind the gap and the one question to ask every vendor.
Buying Guide →Full DPDP compliance is due 13 May 2027 and a standard engagement runs 12 to 16 weeks. Worked backwards, the last honest start is late January 2027. The backwards calendar every founder should see.
The Clock →An in-house DPO costs 25 to 40 lakh a year at current market rates. The two hidden invoices of a first-time internal programme, the cases where in-house is right, and the accountability question that decides it.
Buying Guide →Five DPDP vendor process pages showed the same five or six stages in near-identical order. Here is the buyer test: find who has shipped the work, what they found, and who owns the legal calls.
Field Notes →The AI Dial maps how much AI does in each workflow and marks the point where a human decides. Set the level, name the decision, and test the workflow before live use.
Field Notes →DPDP work includes lawful grounds, vendor contracts, and breach response. This field note asks which lawyer owns those calls when a compliance vendor delivers the software.
Field Notes →An AI tool can take minutes to install and days to review. This field note turns that review into one page covering tools, data, storage, training, and deletion.
Field Notes →Get compliant. Stay compliant.
Statutory representation, monthly compliance ops, quarterly audits, annual refresh, and 24/7 breach response. One DPO, 3-5 companies max.
Stay current with DPDP developments
Daily coverage of DPDP Act developments, Board rulings, enforcement actions, and industry impact analysis.
Visit dpdpnews.in →Auto-updating feed of Data Protection Board notifications, draft rules, and government circulars.
In developmentInsights from engineers, lawyers, and operators at the intersection of tech and law
Technical implementation stories from engineers building DPDP-compliant systems
Coming soonInterpretations and precedent analyses from practicing privacy lawyers
Coming soonReal compliance stories from founders and ops leads who've been through it
Coming soonFree tools to check, calculate, and stay compliant
16 questions. 60 seconds. Get an instant risk report showing exactly where your business stands on DPDP compliance.
Run free audit → dpdpaudit.co.inCalculate your DPDP compliance cost. Get itemized market pricing and a custom compliance roadmap in 2 minutes.
Check your cost → dpdpworkshop.comEnd-to-end DPDP compliance advisory. From gap analysis to implementation — industry-specific guidance from practitioners.
Explore services → dpdpconsulting.inDaily AI-curated digest of DPDP Act developments, enforcement actions, data breaches, and industry impact analysis.
Read today's brief → dpdpnews.inPublic evidence on Indian company privacy posture: trackers, policies, and DPDP readiness signals.
See the investigation → stateofprivacy.in