Privacy Articles
CyberWave GRC articles on Privacy, newest first.
Starlink in India: The Security Conditions Behind the Delay, and What They Mean for Your Vendor Reviews
Starlink holds a licence in India but cannot launch until security clearance and spectrum assignment are complete. The conditions are a data sovereignty test.
DPDP 13 November 2026: What Starts, What Doesn't, and What to Do Before May 2027
DPDP 13 November 2026 is the date the Consent Manager rules start, not the general compliance deadline. The main obligations start on 13 May 2027.
Data Fiduciary Under India's DPDP Act: Duties, Liabilities and Compliance Checklist
Who counts as a Data Fiduciary under the DPDP Act, what obligations attach to that role, and how Significant Data Fiduciaries carry extra duties — explained with a practical compliance checklist.
DPDP Rules: How the Draft Rules Change Day-to-Day Compliance
The DPDP Act set the principles; the Rules set the mechanics. Here's how notice, consent managers, breach reporting timelines, retention periods and verifiable parental consent translate into operational work.
Data Protection Officer: Role, Responsibilities and When You Must Appoint One
When a DPO appointment is mandatory under GDPR and India's DPDP Act, what the role actually does, the independence and conflict-of-interest rules, and how to choose between an in-house and an outsourced DPO.
Navigating India's DPDP Act: What Organizations Need to Know
With the Digital Personal Data Protection Act now in effect, organizations must adapt their data handling practices. Here's a practical roadmap for compliance.