TL;DR: A breach doesn’t wait for you to figure out who to call. If your business handles sensitive data across multiple countries, a single incident can trigger CERT-In’s 6-hour window, GDPR’s 72-hour window, and separate obligations under the US, Australia, and India’s DPDP Act simultaneously, on independent clocks that don’t wait for each other. Most […]
Category Archives: Data Protection & Compliance
24
Apr
Apr
Here is something most founders discover too late: data protection law does not follow your company. It follows your users. You might be incorporated in India, operating from Dubai, with your servers on AWS in Singapore. But the moment a user in Germany signs up for your product, the EU’s General Data Protection Regulation applies […]
28
Jun
Jun
TL;DR: Consent management under India’s DPDP Act is not a policy document, it is something you build: a notice shown before you collect data, a consent mechanism that captures a genuine yes per purpose, a system that logs what was consented to and when, a withdrawal path as easy as the original consent, and a […]
01
Apr
Apr
TL;DR: The Digital Personal Data Protection Act, 2023 governs how anyone, anywhere, handles the digital personal data of people in India. Its Rules were notified on 14 November 2025, and full compliance is due by 13 May 2027. The Act covers not just Indian companies but any business in the world that processes an Indian […]
29
Jan
Jan
TL;DR: Data protection laws govern how organisations collect, use, store, and share personal data, and they now exist almost everywhere. As of 2026, more than 170 countries have enacted data protection legislation, covering around 79% of the world’s population. The EU’s GDPR remains the global benchmark, and most newer laws, including India’s DPDP Act, Brazil’s […]
02
Oct
Oct
TL;DR: A privacy policy is a legal document that tells users what personal data you collect, why you collect it, how you use and store it, who you share it with, and what rights they have over it. In India it is mandatory under the Digital Personal Data Protection Act, 2023. Globally, GDPR, CCPA, and […]