As India brings the Digital Personal Data Protection Act, 2025 into effect, organisations must strengthen their data governance, security controls, and compliance mechanisms to meet the evolving regulatory landscape. With phased enforcement beginning this year, the responsibilities and expectations for Data Fiduciaries, Significant Data Fiduciaries, and Consent Managers have increased substantially.
Key Highlights:
• Key obligations under the DPDPA and DPDP Rules, 2025
• The phased enforcement timelines organisations must prepare for
• Minimum security safeguards and breach-notification requirements
• Applicable exemptions and their implications for compliance strategies
Read our insights
AI, OSINT, and HUMINT: A Combined Approach to Global Asset Tracing in Litigation, Arbitration, and Judgment Enforcement
September 28, 2026
Director Dominika Jaskiewicz's latest Raising the Bar article explores how OSINT, HUMINT, and AI combine to uncover hidden assets in cross-border litigation, arbitration, and judgment enforcement.
A New Frontier: The Changing Face of Regulation in English Football
September 22, 2026
In our first episode, Managing Director Jon Brown interviews new Senior Advisor Adam Crockett to discuss the changing regulatory landscape of English Football. The second half of their discussion will be published next month.
GIR Guide to Compliance: Compliance programme monitoring and auditing: demonstrating effectiveness under regulatory scrutiny
September 17, 2026
Compliance programs are only as strong as your ability to prove they work. Steve Spiegelhalter, Paul Fitzsimmons, Brian Ross, and Rachel Blumenthal outline how effective monitoring and auditing help companies demonstrate program effectiveness under regulatory scrutiny.
