Ep 83: DPDP Act in Practice: How Companies Can Achieve Real Compliance?

What does meaningful compliance with India’s Digital Personal Data Protection Act, 2023 actually look like for businesses?In this episode of In Conversation with IPR & Competition Law, host Isheta Boruah is joined by Kaustubh Shakkarwar, a data protection and technology law practitioner working at the intersection of law, technology, data governance and global privacy compliance.The conversation moves beyond simply understanding the DPDP Act and focuses on the practical challenges companies face when turning legal obligations into functioning compliance systems.💡Key areas discussed:• Understanding the core framework and objectives of the DPDP Act, 2023• Identifying and classifying personal data across HR, marketing, operations and legacy systems• Building meaningful and legally compliant consent mechanisms• The role of Data Protection Officers and internal privacy governance• Managing data processors, vendors and third-party contractual risks• Data retention, deletion and preventing indefinite storage• Reasonable security safeguards and employee awareness• Handling Data Principal rights, including access, correction, erasure and grievance redressal• Preparing for cross-border data transfers and evolving regulatory requirements• Assessing compliance risks and understanding enforcement and penalties• The growing intersection between data protection and competition law• Lessons from the WhatsApp privacy policy litigation and what it means for consent, transparency and data sharing• How businesses can move from “paper compliance” to meaningful privacy governanceOne of the central questions of the episode is simple but important:Is DPDP compliance merely about having policies in place or is it about changing how organisations actually collect, use, share, retain and protect personal data?🎙️ Tune in to the latest episode of In Conversation with IPR & Competition Law for the full conversation.