India's DPDP Act 2023: A Plain-Language Guide for Tech Startups
India's first comprehensive data privacy law is in force. Most Indian startups are not ready. Here is a practical starting point.
Helping Indian tech startups and SaaS companies navigate AI governance, data privacy law, and cross-border compliance from someone who has built products, studied the law, and filed patents across three continents.
GDPR, India's DPDP Act, and the EU AI Act are all in active enforcement. Any Indian SaaS company with global customers is operating under multiple simultaneous obligations โ and most have no structured compliance program in place.
Practical, implementable compliance programs โ not theoretical legal opinions. Every engagement designed around your product, your team, and your specific regulatory exposure.
Structured audit of your data practices against GDPR and India's DPDP Act 2023. Gap analysis, remediation roadmap, privacy notices, and data processing agreements.
2โ3 WeeksComplete internal AI governance program โ acceptable use policies, model documentation, bias testing frameworks, human oversight procedures, and incident response plans.
4โ8 WeeksRisk classification of your AI features, compliance gap analysis, technical documentation framework, and conformity assessment preparation for high-risk AI systems.
3โ5 WeeksEmbed compliance into your product roadmap rather than retrofitting it. Data flow analysis, privacy impact assessments, and developer-friendly compliance checklists.
OngoingMulti-jurisdiction compliance mapping for India, EU, and US. Standard contractual clauses, data localization guidance, and entity structure recommendations.
Project-BasedHalf-day or full-day workshops for product, engineering, and legal teams on data privacy, AI governance, and regulatory compliance in plain language.
1โ2 DaysMost compliance advisors come from one direction โ lawyers who learned enough about technology, or technologists who picked up legal knowledge. Very few have formal qualifications and real-world experience in both.
With a CS degree, LLM in Business Law, Stanford Entrepreneurship program, and 25 years across India, Bay Area, and New Zealand - including work with a major Paris based European telecom, the advice here is legally sound and technically realistic.
An inventor background means deep understanding of how technology is built โ and where compliance obligations intersect with engineering decisions.
Formal legal training, a CS degree, and 25 years of product experience. Advice that is legally sound and technically realistic.
Based in Pune with 14 years across Bay Area and New Zealand. Understands what Indian companies need and what global regulators expect.
25 years of product leadership means knowing what engineering teams can realistically build. Every recommendation is actionable.
No large consulting firm overhead. Direct access to senior expertise at rates that make sense for growing companies.
India's first comprehensive data privacy law is in force. Most Indian startups are not ready. Here is a practical starting point.
Enforcement started in 2025. Indian companies with EU customers using AI features have obligations now. A plain-language guide.
If you have EU customers, GDPR applies regardless of where your company is registered. What every founder must know.