Forthcoming
Digital Personal Data Protection in Indian BFSI
From law to ground reality, technology, governance and compliance. A practical implementation companion for banks, NBFCs and FinTechs in India.
Thirty-five chapters covering the Act and the Rules read for BFSI, the sectoral overlays, and the collisions between DPDP obligations and the ones the sector already carries.
Why this book
No sector carries more overlapping data obligations than BFSI. The DPDP Act arrives on top of regulatory requirements that already govern retention, reporting, outsourcing and customer identification, and those regimes do not always point the same way.
This volume is written for the people resolving those collisions in practice: what governs which activity, where the conflicts are real rather than apparent, and what an implementation actually looks like inside a bank, an NBFC or a FinTech.
The interesting questions in BFSI are not what the Act says. They are what happens when the Act and the sectoral regime both say something, and the two do not agree.
What is inside
- AFoundations
- BThe Act, read for BFSI
- CThe Rules, read for BFSI
- DThe sector's own law
- EThe regulatory collision engine
- FImplementation
- GSegment playbooks for banks, NBFCs and FinTechs
- HClosing
The part readers mention most
Ready to adapt
- Segment playbooks for banks, NBFCs and FinTechs
- Collision matrices mapping DPDP against sectoral obligations
- Retention schedules reconciled across regimes
- Outsourcing and processor contract material
- Implementation and governance models
Who it is for
Compliance, risk, legal, technology and operations leaders across banks, NBFCs and FinTechs.
Not out yet
This volume is in production. If you would like to know when it is available, or you are an organisation likely to want copies, write and I will let you know first.
Tell me when it is out Ask about institutional copiesOther titles in the series

Data Protection in Indian Education
A Whole-of-Institution DPDP Manual.
Out 15 September 2026 · Harmeet Singh KapoorDPDP Act Compliance Handbook
A Practical, Entity Scale Guide to the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.
Forthcoming · Harmeet Singh KapoorDPDP for IT and ITeS
Law, Engineering and Governance of India's Data Protection Regime. A sector reference in twenty-eight chapters.
Forthcoming · Harmeet Singh KapoorThe DPDP Act in the Age of AI
Compliance Engineering for Artificial Intelligence under India's Digital Personal Data Protection Act, 2023 and the Rules of 2025.