Data Protection and Cyber Law: The DPDP Act, 2023 in Practice

<p>Follow a first-time in-house counsel at a Hyderabad telemedicine startup through the real compliance questions the Digital Personal Data Protection Act, 2023 actually raises: what counts as personal data and who is a data fiduciary versus a data principal, what is genuinely in force today given the Act's staggered commencement and the DPDP Rules, 2025, how to rewrite a privacy notice and consent screen that actually satisfies Sections 5 and 6, when consent isn't required at all under Section 7's closed list and the special rules for children's data under Section 9, how to run breach notification to the Data Protection Board and affected patients within the timelines set by Rule 7, and how to run a full compliance gap assessment before a funding round closes.</p>

Tools: DPDP Act 2023, DPDP Rules 2025, Data Protection Board, Privacy Compliance