Guides
Indian data law, made practical
Clear explainers on the obligations that matter — written for the people who have to implement them, not just cite them.
8 min read·Updated 22 Jun 2026
The DPDP Act 2023: a practical compliance guide
What the Digital Personal Data Protection Act requires, who it binds, the 2027 enforcement timeline, and how to build a defensible programme.
6 min read·Updated 22 Jun 2026
CERT-In 6-hour incident reporting, explained
The CERT-In directions require reportable cyber incidents to be reported within six hours. Here is what that means in practice and how to never miss the window.
7 min read·Updated 22 Jun 2026
Cross-border data transfer under the DPDP Act
India uses a negative-list model for transfers abroad. Here is how it works, why foreign model APIs are the new risk, and how to stay on the right side of it.