Question 1

Who needs a Data Protection Officer (DPO) under the DPDPA 2023?

Accepted Answer

Appointment of a DPO is mandatory for entities designated as Significant Data Fiduciaries (SDFs) under the Digital Personal Data Protection Act, 2023. Other Data Fiduciaries — including most MSMEs that process sensitive personal data at scale — are strongly encouraged to designate a person performing equivalent functions to manage compliance, grievances and regulator interface.

Question 2

What does DPO-as-a-Service include for an Indian MSME?

Accepted Answer

DRMLAW's DPO-as-a-Service appoints an external Data Protection Officer with board-level reporting. The engagement covers data mapping and Records of Processing (RoPA), gap assessments, DPIAs, privacy notices and consent architecture, Data Principal request management, vendor & third-party risk management, staff training, breach response and supervisory authority representation.

Question 3

Why outsource the DPO role instead of appointing an internal staff member?

Accepted Answer

Internal legal counsel, CTOs or HR managers who directly decide how personal data is used to drive the business often face a conflict of interest when also designated as DPO. An external DPO guarantees unbiased monitoring and an independent line of defence at the board level — frequently a prerequisite for regulator credibility.

Question 4

Is digital evidence admissible in Indian courts?

Accepted Answer

Yes, subject to compliance with Section 65B of the Indian Evidence Act, 1872 and the corresponding provisions of the Bharatiya Sakshya Adhiniyam, 2023. A certificate authenticating the integrity of the electronic record is required. DRMLAW maintains trial-tested templates aligned with current Supreme Court jurisprudence including Arjun Panditrao.

Question 5

Where does DRMLAW practise?

Accepted Answer

DRMLAW is headquartered in Kolkata with a presence in Bengaluru, with primary appearances before the Hon'ble High Court at Calcutta and the Supreme Court of India. Pan-India representation is provided through an associated counsel network for matters in other High Courts and tribunals.

Key	Category	Purpose	Lifetime
drmlaw_disclaimer_accepted_v1	Strictly Necessary	Remembers that you acknowledged the BCI disclaimer.	Persistent (until cleared)
drmlaw_cookie_consent_v1	Strictly Necessary	Stores your category preferences from the consent banner.	Persistent (until cleared)

What we store, what we don't —
and why it matters.

How we classify storage.

Storage inventory.

Manage your preferences.

What we store, what we don't —and why it matters.

How we classify storage.

Storage inventory.

Manage your preferences.

What we store, what we don't —
and why it matters.