In-depth analysis and practical guidance on India’s Digital Personal Data Protection Act, GDPR, cross-border transfers and global privacy law — from the data-privacy team at King Stubb & Kasiva.
Introduction Businesses increasingly rely on third-party vendors, cloud service providers, technology platforms and outsourced service providers to process personal data. These arrangements…
Introduction India’s Digital Personal Data Protection Act, 2023 (DPDP Act) introduces a comprehensive framework for the processing of digital personal data. For…
The Ministry of Electronics and Information Technology (“MeitY”) has issued the Digital Personal Data Protection (Removal of Difficulties) Order, 2026 (“Order”) under…
Introduction Background verification has become one of the more data-intensive processes undertaken by Indian employers. A single pre-employment check may involve identity…
Introduction The Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) were notified on 13 November 2025, more than two years after the…
Introduction The Digital Personal Data Protection Act, 2023 (DPDP Act) does not expressly require every organisation to issue a separate privacy notice…
A practical compliance roadmap under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 Introduction India’s…
India’s Digital Personal Data Protection Act, 2023 (DPDP Act), together with the Digital Personal Data Protection Rules, 2025 notified in November 2025,…
Introduction The rapid adoption of artificial intelligence (“AI”) has brought data protection considerations into the design, training and deployment of AI systems.…
Introduction The increasing use of remote working, Bring Your Own Device (“BYOD”) arrangements, cloud-based platforms and workplace monitoring software has made employee…
