Written by: Prakhar Rai, Advocate | Founder, My Legal Pal | Enrolled with the Bar Council of India | Contracts and data protection lawyer in India Last reviewed: 6 October 2026, against the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 Quick answer If your business handles personal data in India, a […]
Tag Archives: DPDP
Written by: Prakhar Rai, Founder, My Legal Pal | Bar Council of India | LL.B, NLSIU Bangalore | Master of Business Laws | Advises on DPDP, GDPR, and CCPA compliance for businesses operating in and outside India Quick answer Data mapping is the exercise of finding out, in specific and current terms, what personal data […]
TL;DR: A Data Protection Impact Assessment, or DPIA, is a structured review of how your company processes personal data, what risks that creates for the people whose data it is, and whether your safeguards are actually adequate. Under India’s DPDP Rules, 2025, a DPIA is not required for every business, it is a specific, mandatory […]
28
Jun
Jun
TL;DR: Consent management under India’s DPDP Act is not a policy document, it is something you build: a notice shown before you collect data, a consent mechanism that captures a genuine yes per purpose, a system that logs what was consented to and when, a withdrawal path as easy as the original consent, and a […]
01
Apr
Apr
TL;DR: The Digital Personal Data Protection Act, 2023 governs how anyone, anywhere, handles the digital personal data of people in India. Its Rules were notified on 14 November 2025, and full compliance is due by 13 May 2027. The Act covers not just Indian companies but any business in the world that processes an Indian […]