Consently Blog
Expert insights on DPDPA 2023 compliance, data protection, and privacy best practices
Significant Data Fiduciary Under DPDP: Obligations, DPO Requirements, Audits and Cross-Border Rules
Being designated a Significant Data Fiduciary adds four obligations no ordinary Data Fiduciary has: a resident DPO, an independent data auditor, annual Data Protection Impact Assessments, and algorithmic due diligence. MeitY has also signalled cross-border restrictions for SDFs. Here is what the designation means and how to prepare.
India's AI Governance Guidelines and the DPDP Act: What the Seven Sutras Mean for Data Fiduciaries
India chose voluntary AI governance and binding data protection. The AI Governance Guidelines released at the AI Impact Summit 2026 set seven principles and three new institutions — but the enforceable obligations on AI systems still come from the DPDP Act. Here is how the two fit together, and what a data fiduciary should actually do.
Can You Train AI on Indian Customer Data? What the DPDP Act Says About AI Training Data
India's DPDP Act has no research exemption for commercial AI, no legitimate-interests basis, and no concept of anonymised-enough. If you are fine-tuning a model on customer support transcripts or building a RAG index over user records, here is what the law actually requires — and what breaks.
Google Consent Mode v2 and the DPDP Act: How Indian Websites Should Configure Tags in 2026
Consent Mode v2 is a Google Ads requirement. The DPDP Act is Indian law. They are not the same thing, and configuring one does not satisfy the other. A practical setup guide for Indian websites running GA4, Google Ads, and Tag Manager under DPDP.
The DPDP Act Deadline Calendar: Every Date Between Now and 13 May 2027
The DPDP Rules 2025 set two hard dates: 13 November 2026 for the Consent Manager framework and 13 May 2027 for every core obligation. MeitY has proposed compressing that further. Here is the month-by-month readiness calendar Indian businesses should be working to — with what to finish in each quarter.
Enterprise DPDPA Privacy Platform: What Large Indian Organisations Should Demand in 2026
Enterprise DPDPA compliance is a different problem from installing a banner on one website. Dozens of digital properties, multiple brands, SSO, on-premise mandates, DSAR volume, and vendor risk — a practical requirements guide for large Indian organisations evaluating a DPDPA privacy platform.
What Is the Data Protection Board of India (DPBI)? Powers, Penalties, and How to Be Ready for It
The Data Protection Board of India is the body that will actually fine you under the DPDP Act — up to ₹250 crore per instance. Yet most Indian businesses can't say what it is, how it works, or what it will ask for. A plain-language explainer on the DPBI: composition, powers, penalty schedule, appeals, and the evidence you should be able to produce.
DPDPA 360°: Why DPDPA Compliance Fails When Legal, Technology, and Advisory Work in Silos
Most Indian organisations are buying DPDPA compliance in pieces — a law firm for the opinion, a vendor for the banner, a consultant for the gap report. The pieces don't talk to each other, and the gaps between them are exactly where penalties live. Here's the case for an integrated approach — and a live webinar where we demonstrate it.
DPDP Breach Notification Template & Response Playbook: A 72-Hour Step-by-Step Guide for Indian Businesses
When a personal data breach happens, the DPDP Act gives you 72 hours to file a detailed report with the Data Protection Board — and notify every affected user. A ready-to-adapt notification template and an hour-by-hour response playbook.
Best DPDPA Consent Management Platform for Indian Fintechs in 2026: A Buyer's Guide
Fintechs collect more sensitive personal data than almost any other category of business in India — and the DPDP Act treats every byte of it as the user's property. A practical buyer's guide to choosing a consent management platform built for Indian fintech, banking, and lending.
Why Consently Is the Best DPDP Consent Manager for Your Shopify Store
DPDP consent goes far beyond cookie banners — it governs personal data across account creation, marketing, checkout, recruitment and more. Here is how Shopify merchants in India can manage consent across every customer touchpoint with Consently.
DPDP Consent Management for Startups: Why You Can't Afford to Ignore It in 2026
India's data protection law is live and the compliance clock is ticking. Here's what every startup founder needs to know about the DPDP Act 2023 — and how to get compliant without breaking the bank or burning engineering cycles.