Beyond the Privacy Policy: Making Notice, Consent, and Lawful Processing Work under the DPDP Act, 2023 (The DPDP Framework: From Law to Compliance, Part I)
Organizations often believe that once the privacy policy has been implemented on their website, they have complied with the data-protection obligations under the statute. With the principal compliance obligations under the Digital Personal Data Protection Act, 2023 (“DPDP Act”/ “Act”) scheduled to come into force on May 13, 2027, this is only a starting point. […]









