IAPP Global Summit 2026: Privacy | AI governance | Cybersecurity law

WASHINGTON, DC

30 March-2 April

Back to conference agenda

India's Data Future in a Global Mirror: Navigating the Digital Personal Data Protection Act

Tuesday, 31 March

15:00 - 16:00 EDT

Beginner level

BREAKOUT SESSIONPRIVACYENFORCEMENTFRAMEWORKS AND STANDARDSLAW AND REGULATIONRISK MANAGEMENTADVERTISING AND MARKETINGEDUCATIONFINANCE AND BANKINGGOVERNMENTHEALTH CARETECHNOLOGYTELECOMMUNICATIONS

India has officially brought into play its Digital Personal Data Protection Act (DPDPA) and Rules on 13th November 2025, giving a deadline of 18 months for companies to comply with the act. This marks a watershed moment in global privacy regulation. With a population of over 1.4 billion and one of the fastest-growing digital economies, India’s DPDPA is not just a domestic law, but a global governance pillar. For global organizations that operate in India, such as outsourcing services to or engaging with vendors within India, the DPDPA introduces new obligations and risks that will reshape how multinational organizations approach compliance, cross-border data flows, and digital trust. This session will unpack key provisions of the DPDPA, explore its unique features, and analyze how it aligns or diverges from established data protection regimes such as in Europe and APAC. Attendees will gain practical insights into navigating India’s regulatory landscape while balancing global compliance obligations.

What you will learn:

• Understand the scope, principles, and obligations under India’s DPDPA and Rules.
• Evaluate the operational challenges for global businesses, including consent management, cross-border data transfers and incident / breach reporting.
• Anticipate enforcement trends and regulator priorities in India.

Moderator and speakers

headshot of Charmian Aw

Charmian Aw

AIGP, CIPP/A, CIPP/E, CIPP/US, CIPM, FIP

Partner

Hogan Lovells

headshot of Supratim Chakraborty

Supratim Chakraborty

Partner

Khaitan & Co