India generates some of the largest volumes of personal data in the world. Every UPI transaction, every digital KYC verification, and every healthcare record leaves a trail of data moving across platforms, organizations, and infrastructure. For years, companies treated this as an asset to be maximized. The Digital Personal Data Protection Act (DPDPA) is forcing them to rethink.
Yet DPDPA compliance isn’t just a milestone to check off. It represents a fundamental shift in how organizations think about data ownership, accountability, and digital trust, and it raises harder questions than most businesses are prepared to answer.
To unpack what the DPDPA really means for Indian organizations, we’re joined by Anandaday Misshra, founder and managing partner of AMLEGALS, a pan-India law firm with over 27 years of experience across data governance, AI regulation, and international arbitration. He is also the architect of the Vibe Data Privacy™ framework, which helps enterprises build practical, scalable data governance systems.
In this conversation, he goes beyond the legislation to explore why consent is now a business process, why privacy is moving into the boardroom, and why organizations that treat the DPDPA as a check box exercise may be in for the most painful surprise when enforcement becomes real.
Agenda
- What is driving India’s push for the DPDPA?
- How the DPDPA compares to the GDPR
- Consent is no longer just a check box
- Shadow AI and the ₹250 crore compliance risk hiding in plain sight
- What enforcement will realistically look like in India
