CERT-In's April 2022 Directions Already Apply to You
CERT-In's Directions under Section 70B have applied to Indian body corporates since April 2022: NTP sync, 6-hour incident reporting, a designated Point of Contact, and 180-day log retention. No sector or size exemption.
Read article →DPDP Rules 2025: What They Actually Require, Section by Section
The DPDP Rules 2025 were notified in November 2025. What they require on consent managers, breach timelines, children's data, and the two enforcement dates that matter.
Read article →Hugging Face's Security Incident: What GDPR, DORA, and DPDP Actually Require From You Next
Hugging Face disclosed a security incident July 16, 2026. If you use HF-hosted models or datasets, here is the vendor-risk checklist GDPR, DORA, and DPDP actually require of you next.
Read article →Do Indian Fintechs Need to Disclose DPDP Compliance Before an IPO?
No SEBI rule mandates DPDP disclosure, but underwriters and counsel now expect IPO-bound Indian fintechs to evidence data governance in their risk factors.
Read article →EU AI Act Article 50: What Transparency Requirements Mean for Compliance Teams Before August 2026
Art. 50 sets binding AI transparency obligations — chatbot disclosures, synthetic content labelling, deep fake disclosure — for any product with AI-generated output. The enforcement window opens August 2, 2026.
Read article →DPDP Significant Data Fiduciary Obligations by November 2026
SDF designation under India's DPDP Act activates immediately — no grace period. What CTOs at Indian fintech and healthtech must do before November 2026 on DPO appointment, DPIAs, and data localisation.
Read article →Compliance scans and cyber insurance pricing in India
Indian SaaS and fintech companies with clean posture scans may qualify — per our broker partner — for 10-15% lower cyber liability premiums. Here's how verifiable scan artefacts change the underwriting conversation at renewal.
Read article →GDPR and DPDP Compliance Software Compared for India SaaS
A factual comparison of GDPR and DPDP compliance tools for India-facing SaaS companies with EU operations — frameworks covered, deployment, and how verifiable the outputs are.
Read article →DORA, GDPR, and DPDP compliance scanning India 2026
Indian SaaS companies with EU operations face DORA, GDPR, and DPDP at once. What a multi-framework compliance scanner needs to cover and produce — deterministic output, signed artefacts, cited regulatory sources.
Read article →DPDP Processor Obligations for Call Recording Stacks
What India's DPDP Act 2023 requires of CPaaS and call recording platforms: security safeguards, deletion propagation, SDF designation risk, and six concrete steps to complete before Q1 2027.
Read article →India's DPDP Phase II: What Consent Managers Actually Require Before November 2026
Most India SaaS founders are planning for May 2027. They should be planning for November 2026 first. The consent manager framework goes mandatory in six months — here's what that means in practice for engineering teams.
Read article →