Written by: Prakhar Rai, Founder, My Legal Pal | Bar Council of India | LL.B, NLSIU Bangalore | Master of Business Laws | Advises on DPDP, GDPR, and CCPA compliance for businesses operating in and outside India Quick answer Data mapping is the exercise of finding out, in specific and current terms, what personal data […]
Author Archives: Prakhar Rai
Written by: Prakhar Rai, Founder, My Legal Pal | Bar Council of India | LL.B, NLSIU Bangalore | Master of Business Laws Reviewed by: Deepashree Agnihotri, Corporate Lawyer, My Legal Pal Quick answer There is no such thing as a single “SAFE note” under Indian company law. When a founder or investor says “let’s do […]
TL;DR: If you built your app by describing what you wanted to an AI tool and accepting most of what it generated, “vibe coding,” there’s a real chance you don’t legally own the code the way you assume you do. The Supreme Court let stand a ruling in March 2026 confirming that AI-generated output without […]
TL;DR: An Argentine startup needs a specific stack of legal documents from day one, incorporation documents matching the entity type chosen, a Founders’ Agreement, IP Assignment Agreements, compliant written employment contracts, NDAs, and, once the product is public, trademark filing documents. Each protects a different part of the business, and each needs to actually reflect […]
TL;DR: Running an e-commerce business in the US means complying with a genuinely layered set of federal and state requirements most founders underestimate until something goes wrong, FTC advertising and shipping rules, a patchwork of state sales tax nexus obligations since Wayfair, CAN-SPAM for every marketing email, ADA website accessibility, and state-specific privacy laws that […]
TL;DR: A fintech startup in India needs two layers of legal documentation most other startups don’t: the standard founding, employment, and IP documents every company needs, and a distinct set of RBI-mandated compliance documents, KYC/AML policies, data localisation compliance, Fair Practices Code, and, depending on your specific model, Payment Aggregator or NBFC licensing documentation, that […]
TL;DR: A SaaS reseller agreement governs a fundamentally different relationship from your standard subscription terms. Instead of a direct end-user paying you, a third party resells, rebrands, or bundles your software under its own commercial relationship with the end customer, which changes who owns the customer data, who collects and remits sales tax, who’s liable […]
TL;DR: Argentina’s data protection framework, Ley 25.326, predates both GDPR and CCPA by well over a decade, and it holds something neither of those frameworks has with each other: an active EU adequacy decision, reconfirmed by the European Commission as recently as January 2024, making Argentina the only Latin American jurisdiction with that status. But […]
TL;DR: A Data Protection Impact Assessment, or DPIA, is a structured review of how your company processes personal data, what risks that creates for the people whose data it is, and whether your safeguards are actually adequate. Under India’s DPDP Rules, 2025, a DPIA is not required for every business, it is a specific, mandatory […]
TL;DR: A foreign company cannot file a trademark application in India without appointing an Indian trademark agent or attorney who provides a local address for service, this is a mandatory legal requirement, not a convenience. You then choose between two genuinely different routes, direct national filing or designating India through the Madrid Protocol, and the […]