DPDP Compliance
DPDP Act 2023 obligations, breach response, rights fulfilment, sector overlays.
Scenario Brief: What Tighter RBI Cyber Master Direction Controls Would Mean for PSOs
Tabletop-ready regulatory scenario: continuous control monitoring, board-level cyber risk committees, and a 4-hour SLA on critical incident notification for PSOs.
ComplianceScenario Brief: How a DPDP Penalty for S3 Misconfiguration Could Unfold
Tabletop-ready compliance scenario: how a public S3 bucket leaking identity documents could lead to a major DPDP Board penalty, and what Data…
ComplianceDPDP Phase 2 Effective Date Locked: What Indian SaaS Must Ship by August 2026
What just shifted MeitY’s notification of Phase 2 of the DPDP Rules has locked the effective date for several previously-flagged sections. The…
AcademyModule 8 · Data Masking, Tokenisation, Pseudonymisation
Why this module exists. “Use real production data in development” is the line that produces audit findings and breaches. The alternatives —…
AcademyModule 9 · Privacy Engineering Beyond Compliance
Why this module exists. “Privacy by design” is a phrase in every privacy framework and a practice in few organisations. The shift…
AcademyModule 7 · Data Discovery and Classification — Automated Approaches
Why this module exists. Manual data classification fails. Survey-based “where is sensitive data” produces inventories that miss 40-60% of actual locations. Modern…
AcademyModule 5 · DLP at Scale — Endpoint, Network, and Cloud
Why this module exists. Indian enterprises commonly buy DLP licences and never tune them effectively. The deployment runs in monitor-mode forever, alerts…
AcademyModule 6 · Encryption Strategy — At Rest, In Transit, In Use
Why this module exists. “We encrypt everything” usually means “we encrypt some things at some layer, with key management we haven’t audited.”…
ComplianceDPDP Rules 2026 Notified — What Changed from the Draft, What Every Indian Data Fiduciary Must Operationalise Now
The DPDP Rules under MeitY notification clarified consent format, breach notification timelines, SDF criteria, and cross-border transfer regime. What changed from the…
ComplianceDPDP Penalties Decoded: How the ₹250 Crore Maximum Actually Gets Calculated
The DPDP Act ₹250 crore penalty maximum is a ceiling, not a fixed amount. The Data Protection Board calculates actual penalties against…