All Posts

I recently completed around six hours of Data Privacy sessions with first-semester MBA students. What interested me even more came afterwards — Data Privacy became part of their Mid-Term Examination. I have been involved in privacy education for some time now — through corporate sessions, management students, courses and workshops. But a recent teaching assignment made me think about how privacy education itself may be evolving. I had just completed around six hours of Data P

A recent fintech privacy assessment reminded me that the best outcome of an assessment may not be a longer report. Sometimes, it is seeing issues being addressed before the report is even complete. I am currently working with a fintech organization developing an application designed to analyse users' income and spending patterns. From a privacy perspective, this is naturally an interesting application to assess. Financial information can reveal a great deal about an individua

An employee needs to summarise a long document. Someone in HR wants help drafting a communication. A sales executive wants an AI assistant to analyse customer information. A developer pastes some code into an AI tool to troubleshoot a problem. A manager uploads a spreadsheet and asks for insights. None of these people may think they are introducing artificial intelligence into the organisation. They are simply trying to get their work done faster. But from an AI governance pe

Infrastructure changes constantly. A new server is deployed. Another virtual machine is created. An application is introduced. A department adds a workload. An existing environment expands. From a business perspective, the next question should be straightforward: Does this workload need to be protected? But backup environments can sometimes introduce another set of questions. Do we have another licence available? Will adding this host increase the licensing tier? Do we have e

When we talk about privacy education, the conversation often begins with careers. What roles exist in privacy? What does a Data Protection Officer do? Do organisations need privacy professionals? What skills should students develop? Is privacy going to become an important career opportunity as India's DPDP framework takes shape? These are important questions, and they were part of my recent interactions with management students while teaching data privacy. But something more

A backup administrator opens the monitoring console in the morning. Most jobs have completed successfully. A few warnings need attention. Perhaps one failed job needs to be rerun. It is easy to conclude that the backup environment is under control. But there is another question that may not appear on the dashboard at all: Are we actually backing up everything that needs to be protected? A backup system can only report on the workloads it knows about. If a new server, applicat

The phrase infrastructure simplification sounds attractive. Fewer platforms. Less complexity. Easier management. But organisations do not modernise infrastructure simply because the architecture looks cleaner on a diagram. The real question is: What does simpler infrastructure actually change for the business? For many organisations, the data centre has evolved over years. Virtualisation may come from one platform, storage from another, networking from another, backup and dis

Designing a consent screen can look deceptively simple. Explain why personal data is required. Present the relevant information. Add a checkbox, toggle or button. Capture the individual's choice. But when an organisation actually begins implementing consent, the difficult questions start appearing. What exactly is the individual consenting to? Are different purposes sufficiently clear? Is consent actually required for every activity? Can optional processing be separated from

Artificial intelligence is entering organisations faster than many governance programmes can keep up. Employees use generative AI to draft documents, summarise information and analyse data. Development teams integrate AI services into applications. HR, marketing, customer support and operations increasingly encounter AI-enabled tools. In many organisations, AI is therefore already being used before anyone formally asks: What AI systems are we actually using, what data are the