DPDP Act 2023

When we talk about privacy education, the conversation often begins with careers. What roles exist in privacy? What does a Data Protection Officer do? Do organisations need privacy professionals? What skills should students develop? Is privacy going to become an important career opportunity as India's DPDP framework takes shape? These are important questions, and they were part of my recent interactions with management students while teaching data privacy. But something more

Designing a consent screen can look deceptively simple. Explain why personal data is required. Present the relevant information. Add a checkbox, toggle or button. Capture the individual's choice. But when an organisation actually begins implementing consent, the difficult questions start appearing. What exactly is the individual consenting to? Are different purposes sufficiently clear? Is consent actually required for every activity? Can optional processing be separated from

Suggested excerpt: DPDP implementation should not begin with a checklist or privacy policy. It should begin by understanding the personal data an organisation processes, where it moves and how it is managed.