The DPDP Act in 15 Terms: A Plain-Language Glossary
Fifteen of the 28 definitions in section 2 of the DPDP Act decide whether your data is covered, who carries the duty and what counts as a breach.
AS OF OCTOBER 2026 · 4 MIN READREAD THE BLOG POST
Blogs
BLOGS · BY TRAYAMBIC
12 OF 12 ENTRIES
MORE ENTRIESSHOWING 01–08 OF 12
Your First DPDP Task: A Data Inventory in Two Weeks
The DPDP Act never asks for a data inventory, yet notices, access requests, erasure, breach scoping and proof of consent all depend on one.
AS OF OCTOBER 2026 · 4 MIN READREAD THE BLOG POST
Run a Breach Tabletop Exercise Before May 2027
A 90-minute scripted drill, with injects from the first email to the 72-hour Board report, will show where your breach plan breaks before a real incident does.
AS OF OCTOBER 2026 · 4 MIN READREAD THE BLOG POST
Privacy Training That Works for Small Teams
The DPDP Act never says 'train your staff', but it holds you to what they do; here is a 90-minute module, four role add-ons, a calendar and a way to prove it all happened.
AS OF OCTOBER 2026 · 4 MIN READREAD THE BLOG POST
Building Verifiable Parental Consent Under Rule 10
Rule 10 of the DPDP Rules tells a platform to check that the person consenting for a child is an adult, gives it two ways to do so, and leaves the rest of the design to the product team.
AS OF OCTOBER 2026 · 4 MIN READREAD THE BLOG POST
Running a DPIA When You Are Not a Significant Data Fiduciary
The DPDP Act demands impact assessments only from Significant Data Fiduciaries, but a short, dated DPIA is the best evidence any business can keep that its safeguards were reasonable.
AS OF OCTOBER 2026 · 4 MIN READREAD THE BLOG POST
A DPDP Checklist for Your Website and App
Most of what the DPDP Act asks a business to show the public lives on its website and app, so here are twelve things to check before 13 May 2027.
AS OF OCTOBER 2026 · 4 MIN READREAD THE BLOG POST
Do You Need a DPO? Contact Persons and Grievance Officers
Most businesses do not need a Data Protection Officer under the DPDP Act, but every one of them needs a published contact and a complaints process that answers within 90 days.
AS OF OCTOBER 2026 · 4 MIN READREAD THE BLOG POST
General information on the DPDP Act and Rules, as the law stood at the date shown on each entry. It is not legal advice.
Insights
INSIGHTS · BY TRAYAMBIC
11 OF 11 ENTRIES
MORE ENTRIESSHOWING 01–08 OF 11
The DPDP Removal of Difficulties Order: What Moves, What Doesn't
The October 2026 order under section 43 of the DPDP Act rewrites two clauses, gives its reasons and leaves every date, rule and penalty exactly where it was.
AS OF OCTOBER 2026 · 5 MIN READREAD THE INSIGHT
Deepfakes and Synthetic Content: The 2026 IT Rules for Business
India's February 2026 amendment puts the labelling and takedown duties on intermediaries, but any business that clones a face or a voice also answers to the DPDP Act for the person it depicts.
AS OF OCTOBER 2026 · 5 MIN READREAD THE INSIGHT
Seven Months to Go: A DPDP Milestone Tracker to 13 May 2027
Consent managers arrive on 13 November 2026 and the main DPDP obligations on 13 May 2027, with sector deadlines in between and a Board with no members as of the latest official statement, so here is a dated tracker and a month-by-month plan.
AS OF OCTOBER 2026 · 5 MIN READREAD THE INSIGHT
The RTI Amendment One Year On: Section 8(1)(j) and the DPDP Act
Since November 2025 the RTI Act has exempted personal information without its old public-interest test, the Supreme Court has yet to rule on the change, and public authorities, PSUs and the businesses whose filings they hold are working with a narrower right to information in the meantime.
AS OF OCTOBER 2026 · 5 MIN READREAD THE INSIGHT
What Happens to the SPDI Rules and Section 43A on 13 May 2027
On 13 May 2027 the DPDP Act deletes section 43A of the IT Act and the power under which the SPDI Rules were made, so businesses need to know what lapses, what survives and which contract clauses to rewrite now.
AS OF OCTOBER 2026 · 5 MIN READREAD THE INSIGHT
Consent Managers Go Live on 13 November 2026: What to Do Now
One year after the DPDP Rules were notified, the registration framework for consent managers takes legal effect, but the Board that must register them still has no members.
AS OF OCTOBER 2026 · 5 MIN READREAD THE INSIGHT
Every organisation. No threshold.
Size affects how much must be done. It does not affect whether the law applies.
APPLICABILITY · BRIEFING · 25 SEP 2026READ THE INSIGHT
Five streams, not a privacy policy
Compliance under this Act is not a privacy policy on a website.
COMPLIANCE · BRIEFING · 25 SEP 2026READ THE INSIGHT
General information on the DPDP Act and Rules, as the law stood at the date shown on each entry. It is not legal advice.