PrivaSapien, Data Security Council of India unveil report on DPDP Act compliance (original) (raw)

CRUDEOIL 8,608.00

-234.00

GOLD 155,589.00

-3,958.00

SILVER 248,256.00

-16,540.00

CRUDEOIL 8,608.00

-234.00

CRUDEOIL 8,608.00

-234.00

GOLD 155,589.00

-3,958.00

Drawing on regulatory experience across the EU, UK, California and Singapore, the white paper closes with few recommendations for industry, regulators and government

Updated - June 06, 2026 at 08:38 PM.

| Mumbai

PrivaSapien, a privacy technology company and the Data Security Council of India (DSCI) have launched a report that provides Indian organisations with a practical framework for implementing technical safeguards to unlock data and avoid penalty of upto ₹250 crore as per the Digital Personal Data Protection Act, 2023.

The industry report -- Operationalising DPDP and Privacy by Design -- examines a range of Privacy-Enhancing Technologies (PETs) and mapping their application across healthcare, financial services, telecommunications and AI-driven platforms through sectoral use cases.

One of the key take aways from the report is the distinction between privacy and security. Security does not change the data while in use, while privacy changes the data depending upon the purpose or processing.

Many organisations, it notes, may be technically secure yet non-compliant under the DPDP framework, because consent failures are often architectural problems rather than legal oversights.

Abilash Soundararajan, CEO and Co-Founder, PrivaSapien said DPDP is one of the very first regulations where the technical safeguard carries the highest penalty.

Privacy-enhancing technologies are going to play a very critical role in unlocking data the right way and creating value, because India believes it will be first data-rich and then make citizens become rich, he said.

Privacy Enhancing Technologies protect people from harm while at the same time unlocking data, he added.

Vinayak Godse, CEO, DSCI said Privacy-Enhancing Technologies give organisations a path beyond compliance as a threshold, towards building privacy into the architecture of digital systems from the ground up.

Organisations that invest in strong privacy practices are not just reducing risk but they are creating business value, earning stakeholder trust, and positioning themselves to innovate responsibly, he said.

Drawing on regulatory experience across the EU, UK, California and Singapore, the white paper closes with few recommendations for industry, regulators and government.

Published on June 6, 2026

THIS AD SUPPORTS OUR JOURNALISM.SUBSCRIBE FOR MINIMAL ADS.