Out 15 September 2026
DPDP Act Compliance Handbook
A Practical, Entity Scale Guide to the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.
Sixteen chapters covering the Act section by section, the 2025 Rules, sector overlays, and the compliance artefacts an organisation of any size actually has to produce, from a listed company to a shop with nine employees.
Why this book
Most organisations discover the DPDP Act through a vendor questionnaire or a customer's due diligence form, and then go looking for something that explains what is being asked of them. What they find is either a summary of the statute or a consultancy pitch.
This handbook was written for the person who has to produce the notice, sign the processor contract, run the breach drill and answer the auditor, whether they sit in a listed company or run a business with nine employees.
Compliance you cannot evidence is indistinguishable from no compliance at all.
What is inside
- IFoundations
- IIThe Act
- IIIThe Rules
- IVInterlaw coordination: DPDP, the IT Act and the Aadhaar framework
- VPractical compliance, from the enterprise to the nine-employee establishment
- VICitizen and market impact, closing with AI governance and the rights of citizens
The part readers mention most
Ready to adapt
- Notice and consent templates for common business contexts
- Vendor and processor contract clauses
- DPIA outlines and RoPA formats
- Breach response workflows
- Audit checklists scaled for large, medium and very small establishments
- A staffing and RACI model for the compliance function
Who it is for
Compliance officers, founders, in-house counsel, IT and security leads, and citizens who want to understand what the law gives them.
Out 15 September 2026
The book is with the publisher. If you would like to know the day it is available, or you are an institution likely to want copies, write and I will tell you first.
Tell me when it is out Ask about institutional copiesOther titles in the series
Data Protection in Indian Education
A Whole-of-Institution DPDP Manual.
Forthcoming · Harmeet Singh KapoorDPDP for IT and ITeS
Law, Engineering and Governance of India's Data Protection Regime. A sector reference in twenty-eight chapters.
Forthcoming · Harmeet Singh KapoorDigital Personal Data Protection in Indian BFSI
From law to ground reality, technology, governance and compliance. A practical implementation companion for banks, NBFCs and FinTechs in India.
Forthcoming · Harmeet Singh KapoorThe DPDP Act in the Age of AI
Compliance Engineering for Artificial Intelligence under India's Digital Personal Data Protection Act, 2023 and the Rules of 2025.