Legal Counsel & Compliance Advisor at ComplyZero
Supriya Mehta specializes in Indian technology and data protection law, with deep expertise in the DPDP Act 2023 and its interplay with global frameworks like GDPR. She advises businesses across industries on compliance strategy, consent architecture, and regulatory readiness. Her writing translates complex legal provisions into actionable business guidance.
A complete guide to the Data Protection Board of India: what it does, how it operates, how to file complaints, and what businesses need to know about India's privacy enforcement authority.
A practical comparison of India's DPDP Act 2023 and the EU's GDPR: consent rules, legal bases, penalties, enforcement, and what dual-compliance actually requires.
Section 7 of the DPDP Act 2023 defines nine grounds for processing personal data without consent. Here is what each one means, where businesses misread them, and how they differ from GDPR.
Section 17 of the DPDP Act 2023 carves out 10 categories of exempt processing. Here is what qualifies, what remains partially covered, and what businesses get wrong.
Healthcare providers are Data Fiduciaries under DPDP. Here are the consent rules, breach obligations, research exemptions, and children's data carve-outs that apply specifically to your sector.
A section-by-section guide to the four rights every Data Principal holds under India's DPDP Act 2023, plus the duties most businesses overlook.
Section 10 of the DPDP Act creates a heightened compliance tier. If your organisation qualifies as an SDF, here is exactly what changes.
Section 2(i) of the DPDP Act makes every business that decides what data to collect a Data Fiduciary. Here are the obligations, penalties, and mistakes to avoid.
A section-by-section guide to India's Digital Personal Data Protection Act, 2023, covering consent, data principal rights, penalties up to ₹250 crore, and the May 2027 enforcement deadline.
A rule-by-rule breakdown of the DPDP Rules 2025: phased deadlines, consent notices, breach notification, security safeguards, and what Indian businesses must implement by May 2027.
