Data Protection

data-protection legal skills for India

India's data protection framework shifted fundamentally with the Digital Personal Data Protection Act of 2023, establishing a statutory consent-and-purpose framework, a Board of adjudication, and significant penalties — yet the subordinate rules and sectoral guidance from bodies such as the Reserve Bank of India and SEBI continue to shape how obligations are discharged in practice. The data protection legal skills for India in the ThomasMore catalog are built for that transitional reality, covering consent notice drafting, data fiduciary and data processor obligations, cross-border transfer restrictions, grievance-redressal mechanisms, and breach-response workflows under the DPDP Act.

Each skill is agent-ready and deployable over MCP or as a downloaded file, letting your AI agent run a privacy impact assessment, map processing activities against the Act's grounds for processing, or benchmark a client's policy against the statutory requirements — without rebuilding the analysis from scratch each time. These open-source contributions are maintained by practitioners tracking both the primary statute and the rules the central government issues as the framework matures. The collection is equally useful for in-house counsel building compliance programmes and external advisers advising on M&A due diligence or regulatory investigations before the Data Protection Board. Filter by license or author to find the skill that fits the specific instruction your matter requires, or search across the India hub to combine data protection work with adjacent practice areas such as technology contracting or financial services regulation.