King Stubb & Kasiva Talk to KSK
Insights

Data Privacy Insights

In-depth analysis and practical guidance on India’s Digital Personal Data Protection Act, GDPR, cross-border transfers and global privacy law — from the data-privacy team at King Stubb & Kasiva.

Data Privacy

DPDP Act Compliance for Startups and MSMEs: A Minimum Viable Data Protection Framework 

Introduction The Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) were notified on 13 November 2025, more than two years after the…

Aniket Ghosh · 15 Sep 2026
Data Privacy

Does the DPDP Act Require Separate Notices for Different Categories of Data Principals?

Introduction The Digital Personal Data Protection Act, 2023 (DPDP Act) does not expressly require every organisation to issue a separate privacy notice…

Dhruv Kaushal · 11 Sep 2026
Data Privacy

Digital Personal Data Protection and Residents’ Welfare Associations: What RWAs Need to Do Now

A practical compliance roadmap under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 Introduction India’s…

Dhruv Kaushal · 11 Sep 2026
Data Privacy

How Should Companies Handle Data Shared with Vendors Under the DPDP Act?

India’s Digital Personal Data Protection Act, 2023 (DPDP Act), together with the Digital Personal Data Protection Rules, 2025 notified in November 2025,…

Dhruv Kaushal · 10 Sep 2026
Data Privacy

How Does the DPDP Act Regulate AI Training and Automated Decision-Making in India?

Introduction The rapid adoption of artificial intelligence (“AI”) has brought data protection considerations into the design, training and deployment of AI systems.…

Dhruv Kaushal · 9 Sep 2026
Data Privacy

Can Employers Monitor Employee Devices, Emails and Communications Under India’s DPDP Act?

Introduction The increasing use of remote working, Bring Your Own Device (“BYOD”) arrangements, cloud-based platforms and workplace monitoring software has made employee…

Aniket Ghosh · 9 Sep 2026
Data Privacy

What Happens to Existing SPDI Rules After Full DPDP Enforcement?

Introduction India’s data protection landscape is undergoing its most significant shift in over a decade. The Information Technology (Reasonable Security Practices and…

Dhruv Kaushal · 8 Sep 2026
Data Privacy

How Do the DPDP Rules Interact with the IT Act and Intermediary Guidelines?

Introduction India’s digital regulatory framework is multi-layered. The Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection…

Aniket Ghosh · 8 Sep 2026
Data Privacy

Cross-Border Data Transfers Under India’s DPDP Act: Rules, Restrictions and Compliance Roadmap for 2027

India’s Digital Personal Data Protection Act, 2023 (DPDP Act) introduces a relatively permissive framework for the cross-border transfer of personal data from…

Dhruv Kaushal · 3 Sep 2026
Data Privacy

Data Retention and Deletion Under the DPDP Act: How Long Can Businesses Retain Personal Data in India?

India’s data protection framework has moved from legislation to implementation. With the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the…

Dhruv Kaushal · 2 Sep 2026
1 2 15