Comprehensive Indian Privacy Architecture
With the enactment of the Digital Personal Data Protection Act, 2023 (DPDP Act), India has instituted a dedicated legal regime governing the processing of digital personal data. Organisations acting as Data Fiduciaries face substantial statutory duties and steep statutory penalties for non-compliance.
Adv. Neha Vashisth provides structured privacy counsel to assist businesses in establishing legally robust consent architectures, cross-border transfer agreements, and institutional data governance frameworks.
DPDP Act Compliance Audit
Classifying data flows, identifying Data Fiduciary vs Data Processor obligations, verifying lawful bases for processing, and establishing consent collection notices.
Data Processing Agreements (DPA)
Drafting and negotiating vendor DPAs, security breach notification covenants, audit rights, and data deletion/return mandates upon contract expiry.
Cross-Border Data Transfers
Advising on cross-border data transfer rules under Indian law, negative listing compliance, and harmonisation with GDPR and overseas privacy regulations.
Data Principal Rights & Redressal
Drafting procedures for Data Principal rights (access, correction, erasure, nomination) and establishing mandatory grievance redressal frameworks.
Significant Data Fiduciary (SDF) Governance
For entities designated or likely to be classified as Significant Data Fiduciaries, we assist with Data Protection Impact Assessment (DPIA) frameworks, appointing resident Data Protection Officers (DPOs), and periodic compliance audits.