With the Digital Personal Data Protection Act now moving through its phased rollout toward full enforcement in May 2027, and penalties reaching up to ₹250 crore per violation, compliance in this space has shifted from a background consideration to a core part of how technology businesses are structured.
Indian businesses increasingly operate across state lines and borders; vendor networks, joint ventures, cross-border commercial arrangements; the enforceability of a contract under the Indian Contract Act matters long before the relationship it governs is ever tested.
Technology businesses are subject to obligations under the IT Act, the Digital Personal Data Protection Act, and sector-specific rules around intermediary liability and data handling. We advise on compliance with these frameworks, as well as on software licensing, platform terms, and technology outsourcing agreements. As data protection regulation in India has matured, compliance in this area has shifted from a background consideration to a core part of how technology businesses are structured.