India's DPDPA Compliance Deadline: May 2027

India's Data Privacy Practice — DPDPA, GDPR & Cross-Border Compliance

Free compliance tools and expert guidance for businesses navigating India and global privacy law.

7
Offices Across India
97
Country Network
106+
Privacy Articles
20+
Years Experience
🇮🇳 India Focus

DPDPA 2023 — Are You Ready?

India's comprehensive data protection law is here. With enforcement approaching May 2027, organisations must act now.

Aug 2023
DPDPA Enacted
Digital Personal Data Protection Act, 2023 receives Presidential assent
Jan 2025
Draft Rules Published
DPDP Rules, 2025 released for public consultation
Nov 2025
Final Rules Notified
Rules finalised and enforcement machinery begins
May 2027
Full Enforcement
All obligations in effect, penalties enforceable
₹250 Cr
Maximum Penalty
Per contravention
44
Sections
In the DPDPA
3-Phase
Rollout
Graduated enforcement
SDF
Obligations
Significant Data Fiduciaries

Why KSK for Data Privacy?

A full-spectrum data privacy practice combining deep regulatory expertise with technology-driven solutions.

Pan-India Presence

8 offices covering every major business hub. Local knowledge of state-level compliance requirements.

97-Country Network

Cross-border data compliance through our international network. One firm for global privacy needs.

End-to-End Advisory

From compliance audits to regulatory filings, breach response to policy drafting. Full-spectrum privacy support.

Jidesh Kumar

Jidesh Kumar

Managing Partner
IP, Corporate & Litigation

Advises multinational corporations on IT Act compliance, data protection frameworks, and cross-border data transfers. Leads the firm's IP and technology practice.

Rajesh Sivaswamy

Rajesh Sivaswamy

Senior Partner
M&A, Private Equity & Cross-Border

Drives the firm's legal technology initiatives including AI-powered compliance tools. Advises on data governance for corporate transactions and regulated industries.

Dhruv Kaushal

Dhruv Kaushal

Partner
Technology, Data Privacy & AI

Advises technology, media and telecom companies on DPDPA and privacy compliance, AI governance and emerging-technology law. Recognised as Counsel of the Year for Data Privacy.

Aniket Ghosh

Aniket Ghosh

Partner
Data Privacy & Competition Law

Advises on DPDPA compliance, privacy audits, and competition law intersections with data regulation. Handles regulatory filings and enforcement matters.

Sindhuja Kashyap

Sindhuja Kashyap

Partner
Corporate Compliance & PE

Advises private equity and corporate clients on compliance frameworks including data protection obligations in M&A transactions and fund structuring.

Latest Insights

Expert analysis on India's DPDP Act and global data privacy.

View All Insights →
11 Jun 2026

From Human Fault to Algorithmic Accountability: Tort Law in the AI Era

Artificial Intelligence (AI) is transforming the way decisions are made across critical sectors worldwide. This shift from automation to autonomy presents significant challenges for traditional tort law, which has historically been built around concepts such as human fault, foreseeability and direct causation. Introduction Unlike traditional software systems that operate according to predefined instructions, modern AI […]

Read More
9 Jun 2026

Cyber Operations, Artificial Intelligence and the Law of State Responsibility

Examine how artificial intelligence, cyber-attacks and digital surveillance challenge traditional principles of State responsibility under international law.

Read More
30 Apr 2026

Cyber Law in India: A Critical Analysis of the Information Technology Act, 2000

Introduction Cyber law refers to the body of legal principles governing the use of the internet, digital technologies, and electronic communications. It encompasses a wide range of issues, including cybercrime, e-commerce, data protection, online privacy, and intellectual property rights in the digital environment. The rapid proliferation of digital technologies particularly the internet, mobile devices, and […]

Read More
27 Apr 2026

D&O Insurance in the Age of Data Governance: Premium Realities under India’s DPDP Regime

Introduction India’s enactment of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) marks a decisive shift toward a modern data protection regime anchored in accountability, consent, and enforcement. While the statute is primarily directed at “data fiduciaries,” its implications extend well beyond operational compliance. At the boardroom level, the Act has triggered a reassessment […]

Read More
23 Apr 2026

Click-Wrap Agreements and India’s Data Privacy Law: Aligning Digital Consent with the DPDP Framework

Introduction The architecture of modern digital commerce rests on an unassuming yet powerful legal device: the click-wrap agreement. Whether subscribing to a SaaS platform, downloading a mobile application, or accepting updated privacy terms, users routinely click "I Agree," thereby forming binding contracts. While courts globally have generally upheld such agreements, their intersection with evolving data […]

Read More
20 Apr 2026

Checklist Before Collecting Indian User Data by Multinational Corporations

Navigating India’s Digital Personal Data Protection Act, 2023 Introduction: India’s Data Privacy Inflection Point India is not merely a market but the world’s largest pool of digital consumers, with over 900 million internet users and a rapidly expanding digital economy. For Multinational Corporations (MNCs), collecting personal data from Indian users whether for targeted advertising, product […]

Read More

Stay Ahead of Privacy Regulations

Weekly updates on DPDPA developments, global enforcement actions, and compliance tips. Join 500+ privacy professionals.

No spam. Unsubscribe anytime. We respect your privacy (obviously).