Sansa Law Desk

For Indian businesses that use cloud services, employ overseas vendors, or serve international customers, the rules governing cross-border transfer of personal data under the Digital Personal Data Protection Act, 2023 (DPDPA) are among the most critical provisions to understand. As data flows across jurisdictions in the normal course of business operations, companies must know where their data is stored, processed, and transferred, and whether any restrictions apply. The DPDP

In today's globalised economy, personal data routinely crosses national borders through cloud services, international partnerships, and global supply chains. For Indian businesses, understanding how the Digital Personal Data Protection Act 2023 (DPDPA) regulates cross-border data transfers is critical, whether you are a startup using international cloud infrastructure, a multinational operating in India, or an Indian company with overseas clients. The DPDPA takes a notably di

The Digital Personal Data Protection Act 2023 (DPDPA) is India's first comprehensive data protection legislation, and it fundamentally changes how every business that collects or processes personal data must operate. If your organisation collects customer names, email addresses, phone numbers, payment details, or any other personal information, you are classified as a Data Fiduciary under the DPDPA and must comply with specific legal obligations. With the DPDP Rules 2025 noti