Privacy education, consultancy & implementation, in 50+ jurisdictions.enquiry@vedhacon.com
Guidance and examples adapt to your selection.↑↓ to browse, ↵ to apply
What are you trying to solve?
Understand a privacy lawObligations in plain language Assess your readinessKnow where you stand Implement privacy controlsPolicy into daily practice Prepare for ISO certification27001, 27701 and 42001 Govern an AI deploymentEU AI Act and impact Respond to a data incidentContain, assess, notify Audit and assuranceProve that it works All journeysSeven starting points
Not sure where to start?Check your readiness in 10 minutes

Eighteen questions, eight domains, a prioritised list of gaps. Nothing leaves your browser.

Begin the assessment
Asia-Pacific
IndiaDPDP Act 2023 & Rules 2025 ChinaPIPL, DSL & CSL JapanAPPI and the PPC South KoreaPIPA and the PIPC South East AsiaSix ASEAN regimes compared Australia & New ZealandPrivacy Act 1988 and Privacy Act 2020
Europe
European UnionGDPR, obligations & implementation United KingdomUK GDPR and DPA 2018 Switzerland & EEArevFADP and EEA adoption Türkiye & wider EuropeKVKK, Serbia, Ukraine, Russia EU AI ActRisk tiers and privacy overlap
Americas, Middle East & Africa
CaliforniaCCPA / CPRA consumer rights United StatesState laws and sectoral rules Sarbanes-Oxley (SOX)ICFR, ITGCs & Sections 302/404 CanadaPIPEDA and Quebec Law 25 BrazilLGPD and the ANPD Latin AmericaMexico, Argentina, Chile, Colombia and more Middle EastUAE, Saudi Arabia, Qatar, Bahrain, Oman AfricaNDPA, POPIA, Kenya DPA and more
Plain-language guides for 50+ jurisdictions, updated as the law changes.Browse every jurisdiction
Featured jurisdictionIndia, DPDP Act 2023

Notice, consent, Data Fiduciary duties, SDF obligations and breach intimation, explained.

Open the guide
How we help
Privacy educationBoards, engineers, HR & legal Consultancy & DPOStrategy, gap analysis, DPO as a service ImplementationData mapping, notices, consent, DPIAs Certification readinessISO/IEC 27001, 27701 & 42001 Audit & assuranceInternal audit and evidence packs AI governanceControls for models in production Breach & incident responsePlaybooks, drills and notification All servicesThe full engagement model
Where most engagements startA readiness assessment, then a plan

We scope against the laws that actually apply to you, then sequence the work by risk.

Start the assessment
Diagnostics & toolkits
Readiness checker18-question diagnostic DPIA & RoPA templatesReady-to-adopt toolkits Consent & vendor toolsRegisters & questionnaires Regulatory trackerHorizon scanning Transfer route finderMechanisms & assessments Country guidesObligations A to Z
Free, no sign-upCheck your readiness in 10 minutes

Answer 18 questions and get a prioritised control roadmap instantly.

Start the assessment
Learn
GRC AcademyFrom zero to practitioner AI ExplainedAI, GenAI & RPA in plain English CommunityAsk a moderator AI AssistantAnswers in seconds Learning tracksFoundation to certification
Insights
WhitepapersIn-depth research & briefings BlogNotes from practitioners News & updatesRegulatory change, explained GuidesPractical how-to resources Events & webinarsLive sessions with Q&A
Vedhacon
About VedhaconWhy we exist, who we are DPDP readinessIndia’s implementation clock Careers in GRCEnter from any background Expert networkContribute & mentor
Free, alwaysZero to practitioner

Track 01 assumes no prior knowledge of governance, risk and compliance.

Start Track 01
YOUR PRIVACY CONTROLS

Manage your consent

See exactly what you have agreed to on vedhacon.com, change it whenever you like, and keep a record of every choice. Withdrawing takes the same single click as agreeing.

Last updated: Never · Receipt none yet · Questions: enquiry@vedhacon.com

LanguageEnglish + all 22 Eighth Schedule languages
  • Off by defaultNothing optional runs until you switch it on. Purposes we do not use are listed for transparency but cannot be switched on.
  • Equal choicesAccept and reject carry exactly the same weight.
  • Evidence for youEvery change gets a receipt you can download.
  • Stays on your deviceChoices are stored in this browser, not sent to us.

Your choices, purpose by purpose

Each purpose tells you what is used, why, for how long, and what changes if you say no.

Not based on consent

Strictly necessary

Always on

Delivers and secures the site, and remembers the choices you make on this page so we can respect them.

Legal basis
Not consent. Strictly necessary to provide the site you asked for and to keep proof of your choice
Data used
Your consent record and receipt history; standard request data, such as IP address, handled for security
Kept for
Consent record up to 180 days, then you are asked again. History until you clear it
If switched off
Cannot be switched off. Without it the site could not remember that you said no
Consent · section 6

Preferences

Remembers the jurisdiction you pick in the top bar, so guidance stays relevant between visits.

Legal basis
Your consent, section 6 of the DPDP Act, 2023 (Article 6(1)(a) GDPR where it applies)
Data used
Your selected jurisdiction (vxGeo, vxGeoFlag)
Kept for
Until you switch this off or clear site data
If switched off
The jurisdiction resets to Global on each visit. The saved value is deleted straight away
Not offered today

Analytics

Not in use

Aggregated statistics on which pages are read, used to decide what to publish next. Never used to identify you.

Legal basis
Would be your consent. Never switched on without it
Data used
Page views and approximate device type, aggregated
Status today
Not in use. If we introduce it, it runs only for people who have switched it on
If switched off
No change to your experience
Not offered today

Marketing

Not in use

Measures whether a campaign, event or newsletter led you here.

Legal basis
Would be your consent. Never switched on without it
Data used
The campaign source of your visit
Status today
Not in use. We do not use advertising cookies and never sell personal data
If switched off
No change to your experience

Changes saved here take effect straight away in this browser. Prefer email? Write to {mailWd} with the subject “Consent withdrawal”.

Consent history on this device

A timestamped log of every choice made in this browser, so you can see what you agreed to and when. The latest 50 entries are kept.

Consent history
WhenActionOptional purposes allowedReceipt
No choices recorded yet on this device.
BEYOND THIS WEBSITE

Your rights as a Data Principal

The controls above cover this website. For anything else we hold about you, such as an enquiry, a course registration or a newsletter subscription, use these routes. We acknowledge every request and respond without undue delay, within the period set by the DPDP Rules.

  • Withdraw consentSection 6(4)

    Stop any processing that relies on your consent, including newsletters and event communications.

    Request withdrawal
  • Access a summarySection 11

    What personal data we process, for what purpose, and who we have shared it with.

    Request access
  • Correct or eraseSection 12

    Correct, complete or update your data, or ask us to erase it once the purpose is served.

    Request a change
  • Nominate someoneSection 14

    Name a person to exercise your rights if you die or become unable to act.

    Register a nominee
  • Raise a grievanceSection 13

    Tell us if something has gone wrong. This route must be used before approaching the Board.

    Raise a grievance
  • Escalate to the BoardSection 13(3)

    If our response does not resolve your grievance, you may complain to the Data Protection Board of India.

    How escalation works
Consent Managers

Under sections 6(7) to 6(9) you may also give, review and withdraw consent through a Consent Manager registered with the Data Protection Board. Registration under the DPDP Rules, 2025 applies from 13 November 2026. If we connect to one, it will be listed here.

Please do not send identity documents by email unless we ask. We may need to verify who you are before acting on a request.

Related information

Privacy NoticeCookie PolicyTerms of UseBack to HomeTalk to a privacy practitioner