DPDP Act series
Articles
Nine articles on the DPDP Act, arranged in three series of three parts each.
The DPDP Act in Practice
3 parts
The Engineering Work Inside the DPDP ActConsent, notice, data principal rights, retention, erasure, and breach reporting as system requirementsRead article
When Systems Cannot Do What the Policy PromisesExamining DPDP Act readiness at the level of databases, applications, and infrastructureRead article
Building DPDP Act Compliance That Survives an AuditThe working sequence of assessment, remediation, documentation, and sustained adherenceRead article
Consent Under the DPDP Act
3 parts
Preparing for Registered Consent ManagersWhat the framework establishes, and what your systems must do to work with oneRead article
Handling the Personal Data of ChildrenWhat age assurance involves, what a verifiable parent means, and what the Act forbidsRead article
Processing Under the Legitimate UsesWhat circumstances the Act defines, and how to record which one applies to each purposeRead article
Breach Under the DPDP Act
3 parts
Meeting the Reasonable Security SafeguardsWhat Rule 6 lists, and what each measure asks of your systemsRead article
Discovering a Personal Data BreachWhat detection depends on, and why a year of logs decides itRead article
Reporting to the Board and Your UsersWhat each notification must contain, and when each one is dueRead article