OUR PRACTICE
Considering India’s swift progress towards the modern digital advancements and the emerging requirement of a strong regulatory framework pertaining to privacy and data protection, the businesses are under immense pressure to enhance their privacy standards to avert potential legal risks and to adhere with the statutory compliance requirements.
In response to India's emerging data privacy and protection laws, AQUILAW proudly offers a team of DSCI-certified privacy lead assessors who are recognized as experts in data protection and privacy. This proficiency enables us to provide comprehensive guidance to clients on regulations surrounding data security frameworks and data privacy principles, demonstrating our unwavering commitment to excellence in this field. We actively monitor each client’s mandate from the beginning till the end, and offer our opinions and services impartially, which makes us the ideal choice for your complex queries.
We have provided our extensive services to various renowned companies in various industries. Such services mostly include providing industry specific data privacy services, provide opinions and advisory services, drafting, negotiating and reviewing various agreements, drafting notices, assisting the companies to comply with the various regulatory compliances, conducting a thorough Gap analysis of the client companies to estimate their market standing and potential risks with regards to data security and protection.
Our Service Offerings
Drafting and Reviewing
-
Data privacy framework
-
Data protection agreements
-
Cookies policy
-
Data transfer agreements
-
Agreements between data processors, sub-processors, and vendors.
-
Privacy by design policy and privacy notices
-
Consent notices and data breach notifications
Advisory
-
Standard Contractual Clauses, depending on whether - data is being transferred between fiduciary to fiduciary, fiduciary to processor, processor to processor etc.
-
Steps to be taken for cyber incident reporting in case of data breach and other cyber attacks.
-
General legal advisory regarding various queries and concerns pertaining to the sector
Compliance
-
Regulatory Compliance with Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000
-
Organisational IT maturity and risk assessment
-
Data Protection Impact Assessment and ‘Gap Analysis’
-
Aligning businesses with the legal standards for data processing and transferring.
Key Clients
Notable Deals
Conducted awareness workshop for a listed jewellery company on data privacy laws including drafting data privacy policy.
Drafted and framed the data privacy policy for a company established in the hospitality sector.
Advised a listed jewellery company in conducting data privacy Impact assessment along with conducting an ‘as-is’ analysis of the existing data privacy framework and providing recommendations thereon.
Advised a leading company in the mining industries on compliance to be made under the Information Technology laws for reporting a cyber incident and recommending subsequent action points in accordance with laws.