We use only essential storage to remember your disclaimer acknowledgment and cookie choice. We do not load third-party analytics or advertising trackers today. You can review the details in our Cookie Policy.
We believe in empowering our clients and the public with clear, accurate legal information. Our Resource Center provides a curated collection of briefings, case notes and updates to help you make informed decisions.
These materials are for informational purposes only and do not constitute legal advice or establish an attorney-client relationship.
The provided document highlights how a critical security flaw in the CBSE On-Screen Marking (OSM) portal serves as a major warning for large private universities regarding their immediate liabilities under the Digital Personal Data Protection Act (DPDPA) 2023. It debunks the misconception that state-aligned educational functions enjoy blanket immunity under Section 17(2), clarifying that the statutory mandate under Section 8(5) to maintain reasonable security safeguards is completely non-negotiable. To avoid catastrophic penalties—such as ₹200 crores for minor data violations or ₹250 crores fo
Privacy needs to be engineered within your software design: here’s how to log consent and prove it under the DPDPA.Moving Compliance from Paper to Production: Consent Logging & Data Erasure Under the DPDPA
After decades without specific laws to secure personal data , a landmark 2017 Supreme Court ruling in the Puttaswamy case officially declared privacy a fundamental constitutional right. To turn this victory into a tangible reality, India enacted the Digital Personal Data Protection (DPDP) Act in 2023 and its operational rules in 2025, successfully creating a clear, citizen-centric system to safeguard everyone's digital information
Independent data audits are emerging as the directors' new fiduciary lens — separating statutory compliance from board-level assurance.
How DPDPA reshapes athlete-data handling, sponsorship analytics and the federations' contracting playbook.
An on-the-ground note on why regulators hesitate to mediate — and the framework that finally moves the needle.
Old datasets carry compounding risk under DPDPA. We outline retention, minimisation and disposal under the new statute.
A practitioner's map of who does what across India's courts, tribunals and regulators — for first-time corporate clients.
Reading the criteria the Central Government is likely to invoke, and what early-mover compliance looks like.
Why a growing list of Indian enterprises are likely to be designated SDFs — and what that means operationally.
Significant Government Intermediary obligations: a synthesis of recent litigation, ministry directions and good-faith carve-outs.
A curated collection of one-page guides and templates we share with clients. New material is added regularly — check back, or write to us if you would like a specific brief.
Made with Emergent