Resources
Practical notes on India's Digital Personal Data Protection law and on the commercial contracts growing businesses sign most often. Each article is written and reviewed by a practising advocate and carries the date it was last checked against the law.
DPDP compliance
- The DPDP clauses your vendor agreements now need
Under the DPDP Act you stay responsible for what your vendors do with personal data, and you may use them only under a valid contract. The clauses that contract needs, and where to start.
Adv. Harshit Mishra · 27 October 2026
- Does ISO 27001 cover DPDP? Where it overlaps and where it does not
ISO 27001 certification covers a useful part of the security work the DPDP Act expects, and very little of the rest. Where the two line up, where they do not, and how to sort the work.
Adv. Harshit Mishra · 27 October 2026
- DPDP Rules 2025: what applies when, and what to do before May 2027
The DPDP Rules came into force in three stages. What each stage covers, what has changed since November 2025, and a practical order of work for the months before the main obligations begin.
Adv. Harshit Mishra · 27 October 2026
Contracts
- Reviewing an MSA in India: the clauses to check before you sign
A master services agreement decides liability, ownership, payment and disputes for every piece of work that follows. The ten clauses worth slowing down for, and the points of Indian law behind them.
Adv. Harshit Mishra · 27 October 2026