Supriya Mehta specialises in Indian technology and data protection law, with deep expertise in the DPDP Act 2023 and its interplay with global frameworks like GDPR. She advises businesses across industries on compliance strategy, consent architecture, and regulatory readiness. Her writing translates complex legal provisions into actionable business guidance.
10 articles by Supriya.
DPDP FundamentalsData Protection Board of India (DPBI): Powers, Functions, and What It Means for Your BusinessA complete guide to the Data Protection Board of India: what it does, how it operates, how to file complaints, and what businesses need to know about India's privacy enforcement authority.
ComparisonsDPDP Act vs GDPR: Key Differences for Businesses Operating in India and EuropeA practical comparison of India's DPDP Act 2023 and the EU's GDPR: consent rules, legal bases, penalties, enforcement, and what dual-compliance actually requires.
DPDP FundamentalsLegitimate Uses Under DPDP: Section 7 Examples and BoundariesA practical Section 7 guide for deciding when personal data can be processed without consent under the DPDP Act, with examples, boundaries, and proof to keep.
DPDP FundamentalsDPDP Act Exemptions: When the Law Does Not ApplySection 17 of the DPDP Act 2023 carves out 10 categories of exempt processing. Here is what qualifies, what remains partially covered, and what businesses get wrong.
Industry GuidesDPDP for Healthcare: A Practical Guide to Patient Data, Consent and Breach ReadinessA practical guide to patient data across registration, referrals, research and incident response, with the DPDP decisions hospitals and HealthTech teams need to prepare for.
DPDP FundamentalsData Principal Rights Under DPDP: A Practical Workflow for BusinessesA business workflow for handling DPDP Data Principal rights: access, correction, erasure, grievances, nomination, verification, vendors, and evidence.
DPDP FundamentalsSignificant Data Fiduciary Under DPDP: Readiness GuideA conservative readiness guide for teams that may be notified as Significant Data Fiduciaries under DPDP, covering criteria, obligations, and preparation steps.
DPDP FundamentalsWho is a Data Fiduciary Under DPDP? Roles, Obligations, and PenaltiesWork out when your business is a Data Fiduciary, when it acts as a processor, and what each role means for contracts, consent, security and accountability.
DPDP FundamentalsDPDP Act 2023 Explained: Obligations, Timeline, and PenaltiesA plain-English guide to the DPDP Act 2023 for Indian businesses, covering applicability, consent, legitimate uses, rights, obligations, timeline, and penalties.
DPDP FundamentalsDPDP Rules 2025 Explained: What Businesses Must ImplementA business implementation guide to the DPDP Rules 2025 covering deadlines, notices, consent, breach notification, rights requests, retention, and SDF duties.