Plain-language guidance on India's data protection law — written for compliance owners, IT heads, founders and institute administrators.
Who it applies to, what it demands, key definitions, penalties and the enforcement timeline — the complete primer.
Read article →What took effect in November 2025, what starts in 2026, and what must be ready by full enforcement in May 2027.
Read article →Scope, consent bases, penalties, children's data, DPO rules and more — compared side by side for GDPR-experienced teams.
Read article →Free, specific, informed, unconditional, unambiguous — with pass/fail examples from real Indian consent forms.
Read article →The closed list of situations where consent isn't needed — employment, State functions, legal compliance, emergencies — and their limits.
Read article →Access, correction and erasure, grievance redressal and nomination: what each requires operationally.
Read article →How the classification works, the extra SDF obligations — DPO, audits, DPIA — and how to prepare either way.
Read article →The full penalty schedule from ₹250 crore down to ₹10,000 — and the factors the Board weighs when setting amounts.
Read article →How complaints are filed and adjudicated, voluntary undertakings, appeals to TDSAT, and the six questions the Board will ask you.
Read article →What counts as a breach, who to notify, what the report must contain — plus an hour-by-hour response playbook.
Read article →India's new registered consent intermediary explained — and the five things fiduciaries should fix in their consent architecture now.
Read article →A step-by-step checklist with section references — from data mapping and consent to breach response and vendor contracts.
Read article →Children's data, verifiable parental consent, ERP records and what education institutes must do differently.
Read article →Get a personalised compliance assessment — free, no obligation.
Book a Free Assessment →