Cyber Law & Data Protection

Overview

Where technology risk meets legal obligation.

---

Cyber law work depends as much on the technology behind an incident as on the statute. A data breach involves servers, access logs and network forensics. Digital fraud involves payment gateways, UPI protocols and transaction trails. Advice on either has to account for both.

The advisory draws on the IT Act, 2000 and the DPDP Act, 2023, and covers startups building data-driven products, businesses holding customer information and individuals dealing with online fraud.

Services offered

• DPDP Act 2023 Compliance

  Assessment of data collection, processing, storage and consent practices against DPDP obligations. Privacy notice drafting, consent mechanism review and breach response planning.

• IT Act 2000 Advisory

  Guidance on cyber incidents, intermediary liability, digital evidence, Section 43/66 offences and regulatory obligations for online platforms.

• Digital Fraud & Cybercrime Response

  Advisory for individuals and businesses dealing with UPI fraud, phishing, identity theft, account takeover, impersonation and online financial crime.

• Data Breach Assessment

  Evaluating breach severity, identifying notification obligations, documenting the incident and advising on remediation steps and regulatory communication.

• Privacy Policies & Documentation

  Drafting and reviewing privacy policies, cookie notices, data processing agreements, consent language and internal data handling guidelines.

• Platform & SaaS Compliance

  Advisory for online platforms, SaaS providers and tech companies on intermediary guidelines, content moderation obligations and user data responsibilities.