OUR PRACTICE
Considering India’s swift progress towards the modern digital advancements and the emerging requirement of a strong regulatory framework pertaining to privacy and data protection, the businesses are under immense pressure to enhance their privacy standards to avert potential legal risks and to adhere with the statutory compliance requirements.
Our Data Privacy and Protection practice is highly regarded by clients. Not only do we keep ourselves updated with the latest developments and advancements, but also engage in providing varied services. We actively monitor each client’s mandate from the beginning till the end, and offer our opinions and services impartially, which makes us the ideal choice for your complex queries.
We have provided our extensive services to various renowned companies in various industries. Such services mostly include providing industry specific data privacy services, provide opinions and advisory services, drafting, negotiating and reviewing various agreements, drafting notices, assisting the companies to comply with the various regulatory compliances, conducting a thorough Gap analysis of the client companies to estimate their market standing and potential risks with regards to data security and protection.
Our Service Offerings
Drafting and Reviewing
-
Data privacy framework
-
Data protection agreements
-
Cookies policy
-
Data transfer agreements
-
Agreements between data processors, sub-processors, and vendors.
-
Privacy by design policy and privacy notices
-
Consent notices and data breach notifications
Advisory
-
Standard Contractual Clauses, on a case to case basis as per the requirement of the Client depending on whether - data is being transferred between fiduciary to fiduciary, fiduciary to processor, processor to processor etc.
-
On steps to be taken for cyber incident reporting in case of data breach and other cyber attacks.
-
General legal advisory regarding various queries and concerns pertaining to the sector
Compliance
-
Regulatory Compliance with Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000
-
Organisational IT maturity and risk assessment
-
Data Protection Impact Assessment and ‘Gap Analysis’
-
Aligning businesses with the legal standards for data processing and transferring.
Key Clients
Notable Deals
Conducted awareness workshop with the client on sensitizing data privacy laws including drafting data privacy policy for a listed jewellery company.
Drafted and framed the data privacy policy for a company established in the hospitality sector.
Advised a listed jewellery company in conducting data privacy Impact assessment along with conducting an ‘as-is’ analysis of the existing data privacy framework and providing recommendations thereon.
Advised a leading company in the mining industries on compliance to be made under the Information Technology laws for reporting a cyber incident and recommending subsequent action points in accordance with laws.