_(Logo)_(10)_1789299615725-vHPjly0Q.png)
Data Privacy & Technology Law
DPDPA 2023 compliance, cross-border data transfers, and technology regulation for global companies
India's Digital Personal Data Protection Act 2023 (DPDPA) introduces a consent-based framework for the processing of digital personal data, obligations on Data Fiduciaries, rights for Data Principals, and significant penalties (up to ₹250 crore per violation). For global companies that process Indian personal data — whether in India or outside — DPDPA 2023 creates material compliance obligations that must be integrated with GDPR, PDPA, and other applicable frameworks. RevLaw advises on DPDPA compliance program design, cross-border data transfer mechanisms, and breach response.
What We Do
DPDPA Compliance Programs
Mapping data flows, classifying processing activities, drafting compliant consent notices, and building a data governance framework tailored to the client's Indian operations.
Cross-Border Data Transfer Advisory
Advising on the permitted grounds for transferring Indian personal data outside India pending the Central Government's approved-country notifications.
Data Processing Agreements
Drafting and reviewing DPAs for vendor and processor relationships involving Indian personal data, aligned with both DPDPA and GDPR requirements.
Data Breach Response
Incident response advisory: containment, notification obligations to the Data Protection Board, and communications strategy.
Key Legal Frameworks
DPDPA 2023
India's Digital Personal Data Protection Act — consent-based framework with up to ₹250 crore penalties for violations.
IT Act 2000 & SPDI Rules 2011
Legacy framework for sensitive personal data, still applicable pending full DPDPA commencement rules.
GDPR (EU)
Extraterritorial application is relevant for MNCs; RevLaw advises on India-specific obligations alongside global GDPR compliance.
Why RevLaw for Data Privacy & Technology Law
- Early-mover expertise in DPDPA 2023 — we have tracked the legislation from Bill stage to enactment
- Ability to provide a unified Indian law + comparative privacy law analysis for global compliance teams
- Practical compliance templates that can be adapted across business units
Discuss a Data Privacy Matter
Initial calls are without obligation. We respond within 48 hours.