If you run a website in India, you have probably copied a cookie banner from somewhere. It says “We use cookies. Accept.” Most sites stop there. Under the Digital Personal Data Protection (DPDP) Act, 2023,…
A founder in Indore called me after his company got hit with a phishing attack that drained a good chunk of their business account. He’d already hired a lawyer, someone he found through a quick…
A founder running a payments startup in Pune described his previous lawyer to me in one line. “He was great at answering whatever I asked. He just never told me what I should’ve been asking…
A client of mine, runs a D2C skincare brand out of Bengaluru, called me last year in a complete panic. Her email marketing vendor, one of those popular SaaS tools everyone uses, had a data…
A founder sent me his company’s privacy policy last month. He seemed proud of it. “We copied and adapted this from a well-known SaaS company’s website,” he said. “That should cover us, right?” It didn’t.…
A founder told me something during a recent consultation that I hear often. “We use maybe fifteen different vendors, cloud storage, payroll software, email marketing tools, analytics platforms. I genuinely don’t know if any of…
An HR head told me something during a consultation that I’ve heard in different words many times since. “We’ve been so focused on customer data compliance, we honestly never thought about our own employee records.”…
A founder building an AI-powered customer support tool called me recently, fairly confident about his setup. “We’re just using our own customer chat logs to fine-tune the model. It’s our data, our customers, our systems.…
A founder asked me something last week that a lot of growing businesses eventually ask. “We’re doing well, we handle a fair amount of customer data now. Do we legally need to hire a Data…
A client I was advising on DPDP readiness last month asked me something that a lot of growing companies eventually ask: “We’re not a bank, we’re not Google — surely this ‘Significant Data Fiduciary’ thing…
