Senior Privacy Analyst
Priya Sharma specializes in India's Digital Personal Data Protection Act (DPDPA) and helps organizations comply with data protection regulations. She holds a law degree from NLU Delhi and has published extensively on digital rights in India.
A ten-year-old in Pune opens a gaming app and taps 'I agree' without reading a word. India's DPDPA 2023 says that shouldn't count as consent. But does the law actually protect kids, or does it just look good on paper?
India's IT Intermediary Guidelines are the most significant set of rules governing social media in the country's history. They promise accountability and threaten privacy in roughly equal measure. A thoughtful examination of what they mean for you.
You handed your Aadhaar, PAN, and address proof to a bank. Now what can they do with it? A flat-toned walkthrough of what's allowed, what's not, and the gray zones nobody clarifies.
Most people assume India's Data Protection Board will function like a court. It won't. Here's a thoughtful breakdown of how the DPBI actually operates, what it can do, and the quiet structural problems no one's talking about.
Indian e-commerce platforms promise personalized shopping while quietly building profiles that would make a private investigator jealous. Here's a flat look at what Flipkart, Amazon India, Meesho, and others actually collect — and what they do with it.
India slaps a flat 30% tax on crypto gains with zero deductions, while exchanges hand over your KYC data on request. Here's a Q&A breakdown of what crypto privacy actually looks like in this country, where the tax math stands, and what you can (and can't) do about it.
What exactly does a Data Protection Officer do all day, and why are Indian companies suddenly willing to pay lakhs for someone to fill the role? The DPDPA has created a career that barely existed here three years ago. Here's what the job looks like, what it pays, and how to break in.
Most Indian startups are already violating the DPDPA and don't even know it. The consent banners are wrong, the data maps don't exist, and the clock is ticking toward penalties that could shut a company down.
Your kid logs into an EdTech app for a math lesson, and the company records their age, location, quiz mistakes, how long they stared at a video, and which ads they tapped. Here's what Indian EdTech platforms actually do with student data -- and why parents should be paying closer attention.
Insurance companies in India collect and analyze vast amounts of health data to assess risk and set premiums. Understand how your health information is used and what rights you have.
India's data localization story has taken more turns than most people realize. From early drafts that demanded strict local storage to the DPDP Act's more flexible approach, here's what actually changed and why it matters for your data.
You ported out of Airtel two years ago, but they've still got your Aadhaar scan, your call logs, and a record of every cell tower you pinged. Here's what actually happened when I tried to get Indian telecoms to delete my data.
India slashed its breach reporting window from 24 hours to 6. That's just one piece of the 2026 cybersecurity guidelines -- quarterly CII audits, AI governance rules, and a tiered compliance system round out the rest.
Those cookie pop-ups aren't just a European thing anymore. India's DPDP Act and IT Act rules now shape what websites must do about cookies — and most sites are getting it wrong.
India's DPDP Act took over six years and four drafts to become law — here's what it actually says, who it hits hardest, and why most people I've talked to still don't know their rights under it.
