Professional Summary:
Dhruv is a practicing lawyer with over nine years of experience in the Technology, Media and Telecommunications (TMT) sector, with a particular focus on data protection, privacy, artificial intelligence, intermediary regulations, and emerging technology laws. He is a Certified Information Privacy Professional (Europe) [CIPP(E)] accredited by the International Association of Privacy Professionals (IAPP), demonstrating his expertise in global privacy and data protection frameworks.
He regularly advises domestic and multinational clients on compliance with evolving technology regulations, including the Digital Personal Data Protection Act, 2023 (DPDP Act), and has assisted several leading organisations in developing and implementing comprehensive data privacy compliance frameworks. In addition to providing strategic regulatory advice, he actively contributes to awareness-building initiatives on data protection and privacy governance.
Dhruv also advises clients on the legal and regulatory implications of artificial intelligence and machine learning technologies in India, including risk assessment, governance, and compliance considerations. Further, he has extensive experience assisting Indian enterprises in implementing the General Data Protection Regulation (GDPR) and undertaking related policy, governance, and operational changes to align with international privacy standards.related policy, governance, and operational changes to align with international privacy standards.
Awards and Recognitions:
- Recognized as Innovative Counsel of the Year (Data Privacy), by the India National Bar Association, November 2025
- Honoured by the Board of Directors at HCL for my contribution in various engagements in EMEA, February 2018
- Gem Award, presented by HMD India, official licensee of the Nokia brand, December 2022
Practice Focus
Data Protection & Privacy
End-to-end DPDP Act assessments, GDPR implementation, breach response and privacy compliance offices.
Artificial Intelligence & AI Governance
Advisory on the use of AI and ML technology in India, and on the regulatory environment for AI infrastructure.
Technology, Media & Telecom
Sector advisory spanning intermediary guidelines and wider technology laws.
IT & Commercial Contracts
Drafting and negotiation of technology, outsourcing and commercial agreements.
Regulatory & Compliance Advisory
Representations before the DPIIT and other regulators, and compliance programmes for Indian enterprises.
Cross-Border Data Transfers
Transfer mechanisms, cross-border breach handling and multi-jurisdiction privacy programmes.
Forums & Jurisdictions
Representative Matters & Reported Cases
Transactions
Key Work Highlights
Data Protection
- Advised the India subsidiary of a UK-based automotive manufacturer on an end-to-end DPDP assessment, and on setting up its data privacy compliance office in India (2025).
- Advised the largest beverage manufacturer on an end-to-end DPDP assessment and compliance check (2025).
- Advised a client’s management team on implementation of the General Data Protection Regulation (2016) and the subsequent internal policy amendments made active after 25 May 2018 (2017).
- Advised the management team of a business outsourcing company on a potential personal data breach incident and the associated GDPR implications in Sweden; the matter closed successfully in November 2021 (2017).
- Advised the largest watch manufacturer from Japan on its data protection readiness programme in India (2026).
- Advised a leading hotel group on its data protection programme in India, including drafting responses to notices and legal complaints received from customers (2026).
Artificial Intelligence
- Authored a report on regulatory hurdles in setting up AI-based data centres in India; the report was co-branded and presented at NITI Aayog (2025).
- Advised an agro-tech startup engaged in AI-based farming technology, covering its India entry strategy, closure of investment agreements with overseas shareholders, and entity restructuring (2023).
Technology Regulations
- Represented equipment manufacturers before the DPIIT, Ministry of Commerce and Industry, in their application for registration under the DPIIT Office Memorandum dated 23 July 2020 regarding procurement by government departments (2022).
- Advised a leading mobile device and related equipment manufacturer on manufacturing and assembly set-up for India, Indonesia, Bangladesh, Finland, Egypt and Kenya; transactions closed in August 2022.
Transactions
- Conducted a comprehensive vendor due diligence of a renowned IT company based in Sweden (2018).
- Advised a leading hospitality-sector entity on segregating its technology business from its real-estate and hospitality business (2025).
- Advised a leading B2B pharma entity on its acquisition by a US-based entity, valued at approximately INR 56 crore (2024).
- Represented and advised on the successful takeover of the IT business of a Swedish entity by a large IT company in India (2016–17).
- Represented a technology company in the closure of an agreement involving digital support to a German insurance company, valued at approximately EUR 45 million (2018).
Indicative Experience
- Advised the India subsidiary of a UK based automotive manufacturer, in end-to-end DPDP assessment, and setting up data privacy compliance office in India
- Advised the largest beverage manufacturer in end-to-end DPDP assessment and compliance check
- Advised the client’s management team with regard to implementation of the General Data Protection Regulation (2016) and the subsequent internal policy amendments to be made active post 25 May 2018.
- Advised the management team of a business outsourcing company with respect to a potential personal data breach incident and the associated GDPR implications in Sweden. Matter was successfully closed in November 2021.
- Advised a UK based automotive manufacturing entity in DPDP assessment and compliance check
- Conducted over 125 awareness sessions, in explaining the contours of data protection in India (including DPDP Act) to various individuals
- Authored a report on regulatory hurdles in setting up AI based data centers in India, report was co-branded and presented at Niti Aayog.
- Advised an agro-tech startup, engaged in use of AI based technology for farming, advice involved preparing the India entry strategy, closure of investment agreements with overseas shareholders and entity restructuring.
- Represented equipment manufacturers, before the DPIIT, Ministry of Commerce and Industry, in their application to seek registration under the DPIIT, OM dated 23rd July 2020 regarding procurement by government departments.
- Advised a leading mobile device and related equipment manufacturer, on the manufacturing and assembly set-up for India, Indonesia, Bangladesh, Finland, Egypt and Kenya. Transactions were closed in August 2022
- Involved in a comprehensive vendor due diligence of a renowned IT company based in Sweden.
- Advised a leading hospitality sector entity, on segregating its technology business from the real-estate and hospitality business.
- Advised a leading B2B Pharma entity, in its acquisition by a US based entity. Deal valued at approx. INR 56 Crore.
- Represented and advised in the successful takeover of the IT Business of a Swedish entity by a large IT company in India
- Represented a technology company in closure of an Agreement involving provisioning of digital support to a German company (engaged in sale of insurance services), valued at EUR 45 million (approx.) in April 2018.
Expertise
Key Facts
10+
Years PQE
45+
DPDP / GDPR Projects
65+
AI & Tech Advisory Mandates
125+
Training Sessions Delivered
Education
B.A., LL.B. (Hons.)
Guru Gobind Singh Indraprastha University
CIPP(E)
International Association of Privacy Professionals
Certifications & Memberships
CIPP(E) Certified Professional
Member, India National Bar Association (INBA)
Awards & Recognition
Panel Appointments
Representative Clients
Industry Experience
Technology companies
Advises clients across all sectors on data protection mandates