The DPDP implementation clock
What must be operational before the DPDP Rules’ staged obligations commence on 14 November 2026 and 14 May 2027.
· 10 min read
Whitepapers
In-depth research, written by practitioners
Long-form analysis on the questions that decide programmes: implementation timelines, AI governance, cross-border transfers and audit evidence, grounded in statute and real delivery.
Featured
Latest briefings
AI governance after experimentation
The control model for moving models into production, and the evidence that proves it works.
· 11 min readCross-border transfers, decided
Choosing a transfer mechanism across the GDPR, China’s PIPL and India’s DPDP regime.
· 3 min read
Library
More from the research desk
- Consent under GDPR vs the DPDP ActWhere the two regimes align, where they diverge, and what a single consent record must capture. · · 3 min readRead the paper
- ISO/IEC 42001 before your first AI releaseWhat an AI management system requires before the first release, and when certification makes sense. · · 3 min readRead the paper
- The Significant Data Fiduciary playbookDPIA, independent audit and the additional DPDP obligations, mapped to a working operating model. · · 3 min readRead the paper
- Vendor governance at scaleProcessor due diligence, contracts, monitoring and offboarding under the DPDP Act and the GDPR. · · 3 min readRead the paper
Shorter practitioner notes on the blog · Have a specific question? Ask the AI assistant
Editorial standards
01 · Source
02 · Practice
03 · Currency
How we write
Statute first
Every paper is anchored in the primary text: the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, the GDPR, China’s PIPL and the relevant ISO/IEC standards, not secondary commentary.
Written from delivery
Each recommendation reflects how controls are actually built, evidenced and audited, so you can act on it, not just read it.
Dated and reviewed
Each paper shows its publication date. Law moves; check the date and the regulatory tracker for later changes.
These whitepapers are general information, not legal advice. Apply them to your facts with qualified counsel or talk to us. See our terms of use.
Stay ahead
Get new whitepapers as they publish
Regulatory change, implementation notes and audit lessons, written by people who do the work.