Data protection - Skill Arbitrage Blog

DPDP Act vs GDPR: Side-by-Side for Compliance Professionals

DPDP Act Vs GDPR: For Compliance Professionals

DPDP Act vs GDPR: six lawful bases against consent plus nine legitimate uses, eight rights against four, and no Indian breach threshold. Duties start May 2027

Riyali Ganguly September 8, 2026

Data protection compliance & privancy

DPDP Act Penalties For Non-Compliance

DPDP Act penalties for non-compliance reach 250 crore rupees under the Schedule, but section 33 and the Schedule do not commence until May 2027

Riyali Ganguly September 7, 2026

Anatomy of a DPDP notice and consent request: section 5(1) items, rule 3 conditions, the section 6(1) consent standard and withdrawal under sections 6(4) to (6)

compliance & privancy Data protection

DPDP Act Consent And Notice Rules

The DPDP Act consent and notice rules were notified on 13 November 2025 and do not bind an Indian business until May 2027, with one exception in November 2026

Riyali Ganguly September 2, 2026

Data breach response plan idea and template to help.

Data protection compliance & privancy

Data Breach Response Plan Template

A data breach response plan template runs two Indian clocks: six hours to CERT-In, in force today, and 72 hours to the Data Protection Board from May 2027

Riyali Ganguly August 31, 2026

Data protection compliance & privancy

Is The CIPP/E Certification Worth It From India

The CIPP/E certification is worth it from India only when your work touches EU personal data. Budget 800 to 2,000 US dollars over the first two years

Riyali Ganguly August 25, 2026

Data protection compliance & privancy

Privacy Impact Assessment Steps and Template

A privacy impact assessment runs in nine steps, from a recorded screening decision to a formal sign-off. Every template field maps to Article 35(7) of the GDPR

Riyali Ganguly August 21, 2026

Data protection compliance & privancy

DPDP Act Compliance Checklist for Indian Businesses

DPDP Act compliance starts in May 2027. Use 2026 to prepare your privacy notices, consent processes and data breach response.

Riyali Ganguly August 17, 2026

GDPR Article 30 requires controllers and processors to keep a written record of processing activities. The under-250-employee exemption rarely applies in practice

Data protection compliance & privancy

GDPR Article 30 (Records of Processing) Explained

GDPR Article 30 requires controllers and processors to keep a written record of processing activities. The under-250-employee exemption rarely applies in practice

Riyali Ganguly August 5, 2026

DPDP Act Penalties For Non-Compliance

Data Breach Response Plan Template

Allow notifications

If the modal does not open automatically, then follow these steps.