Last updated: April 29, 2026
Why this module exists. Indian regulated entities don’t operate under DPDP alone. RBI Cyber Framework, SEBI CSCRF, IRDAI guidelines, ABDM, plus international frameworks (GDPR, ISO 27701) for global customers. Each has overlapping but distinct requirements. The compliance team that maps them all onto a unified control set ships faster than the team that runs three parallel programs.
The unified compliance landscape (Indian perspective)
| Framework | Applies to | Focus | DPDP overlap |
|---|---|---|---|
| DPDP Act 2023 | All Data Fiduciaries handling Indian data principals | Personal data lifecycle | — |
| RBI Cyber Framework | Banks, NBFCs, payment systems, fintech | Cybersecurity + ops resilience | ~60% on security; minimal on consent / DSR |
| SEBI CSCRF | Brokers, RIAs, AMCs, MIIs, listed companies | Cyber controls for capital markets | ~50% on security |
| IRDAI Guidelines | Insurers, intermediaries | Information security + outsourcing | ~50% on security |
| ABDM Health Data Rules | Hospitals, healthtech, EHR vendors | Health-data sharing protocols | ~70% — health is sensitive personal data |
| CERT-In Direction (2022) | All ICT service providers | Incident reporting + log retention | Breach notification overlap |
| GDPR | EU data subjects | Personal data lifecycle | ~80% — DPDP took GDPR as template |
| ISO 27701 | Voluntary; orgs with PII | Privacy management system | ~85% — ISO 27701 is GDPR-aligned, fits DPDP well |
Custom team training + practitioner advisory
Beyond the free academy — we run private workshops, vCISO advisory, and red-team exercises tailored to your stack. For Indian SMBs scaling past their first hire.