Data Privacy Evolution in India: DPDPA Insights, Challenges, and the Road Ahead (Mar. 24, 2026)
Includes a Live Web Event on 03/24/2026 at 12:00 PM (EDT)
-
Register
- Non-member - $80
- Member - Free!
- *Further discounts may apply once you log in.
India's data governance landscape is undergoing a historic transformation. With the introduction of the Draft Digital Personal Data Protection Rules 2025 following the Digital Personal Data Protection Act 2023 (“DPDPA”), the nation is re-orienting itself to a modern, consent and rights-oriented approach to data privacy.
The Rules introduce key operational and governance requirements, including itemized notice content, consent architecture, breach reporting timelines, baseline security requirements as well as specific obligations for certain classes of data fiduciaries (akin to data controllers).
Designed for in-house counsel of businesses operating or intending to operate in India, this Webcast will provide:
- A strategic overview of where the DPDPA stands today;
- A deep dive into the draft rules and key compliance obligations;
- Practical guidance for organizations on readiness, operating models, and next steps; and
- Insights into how enforcement trends globally may influence regulatory expectations from enforcement authorities / courts.
Generously Sponsored by Khaitan & Co
This live program offers free CLE in select jurisdictions for members of ACC. Please see details below!
CLE/CPD CREDIT IS AVAILABLE IN THE FOLLOWING JURISDICTIONS:
*Alaska, *Arizona, California, *Connecticut, Georgia, *Hawaii, Illinois, Minnesota, Missouri, *Montana, *New Hampshire, *New Jersey, *New York, *North Dakota, Ohio, Pennsylvania,Tennessee, Texas, and Washington.
*Indicates that CLE/CPD credit is available by virtue of reciprocity with another jurisdiction.
ACC WILL MAKE AN APPLICATION FOR CLE UPON REQUEST IN THE FOLLOWING JURISDICTIONS:
Arkansas, Colorado, Delaware, Kansas, Louisiana, New Mexico, North Carolina, South Carolina, and Vermont.
Requests must be made one week prior to the scheduled program date to ensure timely application submission. Please use the form below to submit your request for CLE.
CLICK HERE TO ACCESS THE FORM!
ATTENDEES MUST SELF-FILE IN THE FOLLOWING JURISDICTIONS (A CERTIFICATE WILL BE PROVIDED TO ASSIST YOUR FILING EFFORTS):
Alabama, Florida, Idaho, Indiana, Iowa, Kentucky, Maine, Mississippi, Nebraska, Nevada, North Carolina, Oklahoma, Oregon, Puerto Rico, Rhode Island, Utah, West Virginia, Wisconsin, and Wyoming.
CLE/CPD IS NOT MANDATORY IN THE FOLLOWING JURISDICTIONS:
District of Columbia, Maryland, Massachusetts, Michigan, South Dakota
Key:
Complete
Next
Failed
Available
LockedSupratim Chakraborty
Partner
Khaitan & Co.
Supratim is a Partner in the Corporate and Commercial Practice Group and co-leads the Privacy, Data Protection and TMT Practice at Khaitan & Co. He has advised eminent clients in relation to information technology laws in India including data privacy and cyber security related issues. As one of India’s leading data privacy lawyers, he has been ranked as a “Leading Individual” for data protection by the Legal500 year on year. Under his leadership, Khaitan & Co has been awarded “Data Protection Law Firm of the Year” by ALB India Law Awards for several consecutive years.
Supratim is also the recipient and exclusive winner of Lexology “Client Choice Award” 2022 for Data Protection. Also, he has been recognised in ALB’s Super 50 TMT Lawyers in Asia for 2023 and 2024 and by the Economic Times in their prestigious 40 under Forty List for India’s brightest young business leaders in 2023. Additionally, he has also been featured as an "Innovative Practitioner" in the Financial Times Asia Pacific Innovative Lawyers Report.
Supratim is a member of ASSOCHAM’s National Council for FinTech, Digital Assets and Blockchain Technology. He routinely provides inputs and recommendations to the Government of India on its legislative initiatives, especially on the digital laws front. He is amongst a selected few individuals in India from whom the Ministry of Electronics and Information Technology, Government of India, had specifically sought comments during the early-stage deliberations of the newly enacted Digital Personal Data Protection Act 2023.
He conducts several training and knowledge sessions for leading corporates across the globe, on topics such as data privacy compliance and risk mitigation, compliance strategies to adapt to India’s continuously evolving data privacy and technology laws etc.
Smita Jha
Partner
Khaitan & Co
Smita Jha is a Partner in the Banking & Finance and Fintech Practice Group of Khaitan & Co. Smita has advised eminent clients in relation to banking & finance, fintech platforms, payments and digital lending laws in India and offshore, and holds expertise in advising on data-related compliances for financial services entities. As one of India’s leading banking & finance lawyers, she is ranked as a “Recommended Lawyer” for by The Legal 500 Asia Pacific 2021, and has been recognized as a “Ranked Lawyer” by Chambers and Partners Fintech Guide 2026.
Her expertise lies in advising banks, financial institutions, companies, fintechs on debt funding, product structuring, data privacy and regulatory advisory. Smita also takes keen interest in securitization, consumer finance, payments, digital lending solutions, blockchain and other emerging technology, and frequently advises investors, founders and companies in these areas.
Smita is a member of United Fintech Forum (UFF) and the standards committee of Fintech Association for Consumer Empowerment (FACE), and regularly participates in stakeholders consultations / meets and feedback sessions organised by the association on issues relating to digital lending community.
Sumantra Bose
Counsel
Khaitan & Co
Sumantra is a Counsel in the Corporate, Privacy and Data Protection Practice and TMT Practice of Khaitan & Co. He has extensive experience in advising domestic and international clients on data protection and cybersecurity laws, privacy implications of new-age technologies involving artificial intelligence and blockchain, as well as drafting of technology contracts such as SaaS agreements. Sumantra is an expert on data structuring for large conglomerates and as part of corporate transactions.
Sumantra has considerable experience in advising domestic and international clients on technology and intermediary related laws. He has assisted several foreign companies in setting up their intermediary platforms in India, and has provided detailed guidance by preparing compliance checklists, risk mitigation strategies, etc. Sumantra's expertise in this area has enabled his clients to navigate the legal landscape in India and ensure that their operations comply with local intermediary laws.
He has been part of several ministerial consultations for drafting of technology legislations in India and has published in reputed publications such as Thomson Reuters, Data Guidance, etc. Sumantra has been recommended in the 2023, 2022 and 2021 Legal500 Asia Pacific ranking edition for Data Protection in India and in the 2024 Legal500 Asia Pacific ranking edition for TMT in India.
Sumantra is a Certified Information Privacy Professional (Europe), a globally-recognized certification on GDPR issued by the International Association of Privacy Professionals.
