Home > Expertise > Practice Areas > Data Privacy & Protection
OUR
PRACTICE
AZB & Partners is highly regarded by clients and our peer network, for our specialised and diverse experience in the privacy and data protection space. Our team comprises CIPP / E certified professionals, industry body representatives and sectoral experts in TMT, Fintech, healthcare, IT, intellectual property, e–commerce, blockchain, AI, automotive, electronics and financial and payment technologies. This enables us to better understand the technology and regulatory space our clients operate in and render nuanced advice.
Our lawyers work on both advisory and transactional mandates and often in a cross–jurisdictional context. We participate in stakeholder and regulatory consultations on the evolving privacy and data protection framework in India. Clients seek our assistance while preparing for depositions before Joint Parliamentary Committee (JPC) constituted to examine the PDP Bill.
GET IN TOUCH
-
Anind Thomas
Partner
-
Nandan Pendsey
Partner
-
Rachit Bahl
Senior Partner
-
Vipul Jain
Partner
WHAT
WE DO
AZB’s highly specialised privacy and data protection practice helps clients formulate their data protection management programme, develop data protection policies, document data flows within their organisation and categorise sensitive personal data to ensure that requisite controls are put in place to safeguard such data from threats.
Our lawyers are adept at identifying legal and regulatory risks related to non–compliance with data protection frameworks and providing strategic opinions on the adoption of the ‘privacy by design’ principle while creating new technologies and systems.
All client mandates are viewed independently and we closely engage with them from commencement till closure, sharing insights on critical regulatory and/or legislative developments. We also conduct training sessions within client organisations to educate them on compliance requirements relating to collection, handling and processing of personal data, guiding them on best practices to mitigate data breach risks.
RECENT WORK HIGHLIGHTS
-
On (i) Liability issues associated with a ‘data breach’ (ii) Reporting requirements under the Information Technology Act, 2000
-
On (i) The data protection framework for its marketplace and e-commerce business, AI applications, devices and programs, testing, health and COVID-19 preparedness, payments and cloud business (ii) Applicable data localisation requirements (iii) Privacy by design frameworks
-
On (i) Data protection and privacy regulations relating to the banking business (ii) The validity of e–signatures and electronic contracts
-
On (i) Data sharing strategies (ii) Establishing a framework for its digital business
-
On data privacy laws relating to its terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On setting up and aligning its data protection and cybersecurity framework across business verticals
-
On (i) Drafting and preparing the privacy policy for its online fantasy gaming website (ii) Applicable data privacy laws in India
-
On applicable data privacy laws in relation to its global data processing and outsourcing centres in India
-
On data privacy laws in the context of its privacy statements and policies for customer cards
-
On its privacy policy for the Junior National Basketball Association Program, in accordance with the data privacy regulations in India
-
On issues relating to the notice requirements for its collection, handling, disclosure and transfer of personal information, including sensitive personal data or information
-
On (i) Content liability issues under the Information Technology Act, 2000 (ii) Preparing the privacy policy and terms of use for its website, ‘www.hotstar.com’ and associated mobile applications
-
On the privacy and data protection aspects of (i) The storage, management and transfer of subscriber data for digital customer programs and payment facilities (ii) The handling and transfer of subscriber data for vehicle technologies, card vault technologies and M2M businesses
-
With respect to privacy considerations relating to the launch of vehicle technologies
-
On data privacy laws in India relating to its agreement with a payroll service provider and terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On (i) Liability issues associated with a ‘data breach’ (ii) Reporting requirements under the Information Technology Act, 2000
-
On (i) The data protection framework for its marketplace and e-commerce business, AI applications, devices and programs, testing, health and COVID-19 preparedness, payments and cloud business (ii) Applicable data localisation requirements (iii) Privacy by design frameworks
-
On (i) Data protection and privacy regulations relating to the banking business (ii) The validity of e–signatures and electronic contracts
-
On (i) Data sharing strategies (ii) Establishing a framework for its digital business
-
On data privacy laws relating to its terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On setting up and aligning its data protection and cybersecurity framework across business verticals
-
On (i) Drafting and preparing the privacy policy for its online fantasy gaming website (ii) Applicable data privacy laws in India
-
On applicable data privacy laws in relation to its global data processing and outsourcing centres in India
-
On data privacy laws in the context of its privacy statements and policies for customer cards
-
On its privacy policy for the Junior National Basketball Association Program, in accordance with the data privacy regulations in India
-
On issues relating to the notice requirements for its collection, handling, disclosure and transfer of personal information, including sensitive personal data or information
-
On (i) Content liability issues under the Information Technology Act, 2000 (ii) Preparing the privacy policy and terms of use for its website, ‘www.hotstar.com’ and associated mobile applications
-
On the privacy and data protection aspects of (i) The storage, management and transfer of subscriber data for digital customer programs and payment facilities (ii) The handling and transfer of subscriber data for vehicle technologies, card vault technologies and M2M businesses
-
With respect to privacy considerations relating to the launch of vehicle technologies
-
On data privacy laws in India relating to its agreement with a payroll service provider and terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On (i) Liability issues associated with a ‘data breach’ (ii) Reporting requirements under the Information Technology Act, 2000
-
On (i) The data protection framework for its marketplace and e-commerce business, AI applications, devices and programs, testing, health and COVID-19 preparedness, payments and cloud business (ii) Applicable data localisation requirements (iii) Privacy by design frameworks
-
On (i) Data protection and privacy regulations relating to the banking business (ii) The validity of e–signatures and electronic contracts
-
On (i) Data sharing strategies (ii) Establishing a framework for its digital business
-
On data privacy laws relating to its terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On setting up and aligning its data protection and cybersecurity framework across business verticals
-
On (i) Drafting and preparing the privacy policy for its online fantasy gaming website (ii) Applicable data privacy laws in India
-
On applicable data privacy laws in relation to its global data processing and outsourcing centres in India
-
On data privacy laws in the context of its privacy statements and policies for customer cards
-
On its privacy policy for the Junior National Basketball Association Program, in accordance with the data privacy regulations in India
-
On issues relating to the notice requirements for its collection, handling, disclosure and transfer of personal information, including sensitive personal data or information
-
On (i) Content liability issues under the Information Technology Act, 2000 (ii) Preparing the privacy policy and terms of use for its website, ‘www.hotstar.com’ and associated mobile applications
-
On the privacy and data protection aspects of (i) The storage, management and transfer of subscriber data for digital customer programs and payment facilities (ii) The handling and transfer of subscriber data for vehicle technologies, card vault technologies and M2M businesses
-
With respect to privacy considerations relating to the launch of vehicle technologies
-
On data privacy laws in India relating to its agreement with a payroll service provider and terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On (i) Liability issues associated with a ‘data breach’ (ii) Reporting requirements under the Information Technology Act, 2000
-
On (i) The data protection framework for its marketplace and e-commerce business, AI applications, devices and programs, testing, health and COVID-19 preparedness, payments and cloud business (ii) Applicable data localisation requirements (iii) Privacy by design frameworks
-
On (i) Data protection and privacy regulations relating to the banking business (ii) The validity of e–signatures and electronic contracts
-
On (i) Data sharing strategies (ii) Establishing a framework for its digital business
-
On data privacy laws relating to its terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On setting up and aligning its data protection and cybersecurity framework across business verticals
-
On (i) Drafting and preparing the privacy policy for its online fantasy gaming website (ii) Applicable data privacy laws in India
-
On applicable data privacy laws in relation to its global data processing and outsourcing centres in India
-
On data privacy laws in the context of its privacy statements and policies for customer cards
-
On its privacy policy for the Junior National Basketball Association Program, in accordance with the data privacy regulations in India
-
On issues relating to the notice requirements for its collection, handling, disclosure and transfer of personal information, including sensitive personal data or information
-
On (i) Content liability issues under the Information Technology Act, 2000 (ii) Preparing the privacy policy and terms of use for its website, ‘www.hotstar.com’ and associated mobile applications
-
On the privacy and data protection aspects of (i) The storage, management and transfer of subscriber data for digital customer programs and payment facilities (ii) The handling and transfer of subscriber data for vehicle technologies, card vault technologies and M2M businesses
-
With respect to privacy considerations relating to the launch of vehicle technologies
-
On data privacy laws in India relating to its agreement with a payroll service provider and terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On (i) Liability issues associated with a ‘data breach’ (ii) Reporting requirements under the Information Technology Act, 2000
-
On (i) The data protection framework for its marketplace and e-commerce business, AI applications, devices and programs, testing, health and COVID-19 preparedness, payments and cloud business (ii) Applicable data localisation requirements (iii) Privacy by design frameworks
-
On (i) Data protection and privacy regulations relating to the banking business (ii) The validity of e–signatures and electronic contracts
-
On (i) Data sharing strategies (ii) Establishing a framework for its digital business
-
On data privacy laws relating to its terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On setting up and aligning its data protection and cybersecurity framework across business verticals
-
On (i) Drafting and preparing the privacy policy for its online fantasy gaming website (ii) Applicable data privacy laws in India
-
On applicable data privacy laws in relation to its global data processing and outsourcing centres in India
-
On data privacy laws in the context of its privacy statements and policies for customer cards
-
On its privacy policy for the Junior National Basketball Association Program, in accordance with the data privacy regulations in India
-
On issues relating to the notice requirements for its collection, handling, disclosure and transfer of personal information, including sensitive personal data or information
-
On (i) Content liability issues under the Information Technology Act, 2000 (ii) Preparing the privacy policy and terms of use for its website, ‘www.hotstar.com’ and associated mobile applications
-
On the privacy and data protection aspects of (i) The storage, management and transfer of subscriber data for digital customer programs and payment facilities (ii) The handling and transfer of subscriber data for vehicle technologies, card vault technologies and M2M businesses
-
With respect to privacy considerations relating to the launch of vehicle technologies
-
On data privacy laws in India relating to its agreement with a payroll service provider and terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On (i) Liability issues associated with a ‘data breach’ (ii) Reporting requirements under the Information Technology Act, 2000
-
On (i) The data protection framework for its marketplace and e-commerce business, AI applications, devices and programs, testing, health and COVID-19 preparedness, payments and cloud business (ii) Applicable data localisation requirements (iii) Privacy by design frameworks
-
On (i) Data protection and privacy regulations relating to the banking business (ii) The validity of e–signatures and electronic contracts
-
On (i) Data sharing strategies (ii) Establishing a framework for its digital business
-
On data privacy laws relating to its terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On setting up and aligning its data protection and cybersecurity framework across business verticals
-
On (i) Drafting and preparing the privacy policy for its online fantasy gaming website (ii) Applicable data privacy laws in India
-
On applicable data privacy laws in relation to its global data processing and outsourcing centres in India
-
On data privacy laws in the context of its privacy statements and policies for customer cards
-
On its privacy policy for the Junior National Basketball Association Program, in accordance with the data privacy regulations in India
-
On issues relating to the notice requirements for its collection, handling, disclosure and transfer of personal information, including sensitive personal data or information
-
On (i) Content liability issues under the Information Technology Act, 2000 (ii) Preparing the privacy policy and terms of use for its website, ‘www.hotstar.com’ and associated mobile applications
-
On the privacy and data protection aspects of (i) The storage, management and transfer of subscriber data for digital customer programs and payment facilities (ii) The handling and transfer of subscriber data for vehicle technologies, card vault technologies and M2M businesses
-
With respect to privacy considerations relating to the launch of vehicle technologies
-
On data privacy laws in India relating to its agreement with a payroll service provider and terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On (i) Liability issues associated with a ‘data breach’ (ii) Reporting requirements under the Information Technology Act, 2000
-
On (i) The data protection framework for its marketplace and e-commerce business, AI applications, devices and programs, testing, health and COVID-19 preparedness, payments and cloud business (ii) Applicable data localisation requirements (iii) Privacy by design frameworks
-
On (i) Data protection and privacy regulations relating to the banking business (ii) The validity of e–signatures and electronic contracts
-
On (i) Data sharing strategies (ii) Establishing a framework for its digital business
-
On data privacy laws relating to its terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On setting up and aligning its data protection and cybersecurity framework across business verticals
-
On (i) Drafting and preparing the privacy policy for its online fantasy gaming website (ii) Applicable data privacy laws in India
-
On applicable data privacy laws in relation to its global data processing and outsourcing centres in India
-
On data privacy laws in the context of its privacy statements and policies for customer cards
-
On its privacy policy for the Junior National Basketball Association Program, in accordance with the data privacy regulations in India
-
On issues relating to the notice requirements for its collection, handling, disclosure and transfer of personal information, including sensitive personal data or information
-
On (i) Content liability issues under the Information Technology Act, 2000 (ii) Preparing the privacy policy and terms of use for its website, ‘www.hotstar.com’ and associated mobile applications
-
On the privacy and data protection aspects of (i) The storage, management and transfer of subscriber data for digital customer programs and payment facilities (ii) The handling and transfer of subscriber data for vehicle technologies, card vault technologies and M2M businesses
-
With respect to privacy considerations relating to the launch of vehicle technologies
-
On data privacy laws in India relating to its agreement with a payroll service provider and terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On (i) Liability issues associated with a ‘data breach’ (ii) Reporting requirements under the Information Technology Act, 2000
-
On (i) The data protection framework for its marketplace and e-commerce business, AI applications, devices and programs, testing, health and COVID-19 preparedness, payments and cloud business (ii) Applicable data localisation requirements (iii) Privacy by design frameworks
-
On (i) Data protection and privacy regulations relating to the banking business (ii) The validity of e–signatures and electronic contracts
-
On (i) Data sharing strategies (ii) Establishing a framework for its digital business
-
On data privacy laws relating to its terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On setting up and aligning its data protection and cybersecurity framework across business verticals
-
On (i) Drafting and preparing the privacy policy for its online fantasy gaming website (ii) Applicable data privacy laws in India
-
On applicable data privacy laws in relation to its global data processing and outsourcing centres in India
-
On data privacy laws in the context of its privacy statements and policies for customer cards
-
On its privacy policy for the Junior National Basketball Association Program, in accordance with the data privacy regulations in India
-
On issues relating to the notice requirements for its collection, handling, disclosure and transfer of personal information, including sensitive personal data or information
-
On (i) Content liability issues under the Information Technology Act, 2000 (ii) Preparing the privacy policy and terms of use for its website, ‘www.hotstar.com’ and associated mobile applications
-
On the privacy and data protection aspects of (i) The storage, management and transfer of subscriber data for digital customer programs and payment facilities (ii) The handling and transfer of subscriber data for vehicle technologies, card vault technologies and M2M businesses
-
With respect to privacy considerations relating to the launch of vehicle technologies
-
On data privacy laws in India relating to its agreement with a payroll service provider and terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On (i) Liability issues associated with a ‘data breach’ (ii) Reporting requirements under the Information Technology Act, 2000
-
On (i) The data protection framework for its marketplace and e-commerce business, AI applications, devices and programs, testing, health and COVID-19 preparedness, payments and cloud business (ii) Applicable data localisation requirements (iii) Privacy by design frameworks
-
On (i) Data protection and privacy regulations relating to the banking business (ii) The validity of e–signatures and electronic contracts
-
On (i) Data sharing strategies (ii) Establishing a framework for its digital business
-
On data privacy laws relating to its terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On setting up and aligning its data protection and cybersecurity framework across business verticals
-
On (i) Drafting and preparing the privacy policy for its online fantasy gaming website (ii) Applicable data privacy laws in India
-
On applicable data privacy laws in relation to its global data processing and outsourcing centres in India
-
On data privacy laws in the context of its privacy statements and policies for customer cards
-
On its privacy policy for the Junior National Basketball Association Program, in accordance with the data privacy regulations in India
-
On issues relating to the notice requirements for its collection, handling, disclosure and transfer of personal information, including sensitive personal data or information
-
On (i) Content liability issues under the Information Technology Act, 2000 (ii) Preparing the privacy policy and terms of use for its website, ‘www.hotstar.com’ and associated mobile applications
-
On the privacy and data protection aspects of (i) The storage, management and transfer of subscriber data for digital customer programs and payment facilities (ii) The handling and transfer of subscriber data for vehicle technologies, card vault technologies and M2M businesses
-
With respect to privacy considerations relating to the launch of vehicle technologies
-
On data privacy laws in India relating to its agreement with a payroll service provider and terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On (i) Liability issues associated with a ‘data breach’ (ii) Reporting requirements under the Information Technology Act, 2000
-
On (i) The data protection framework for its marketplace and e-commerce business, AI applications, devices and programs, testing, health and COVID-19 preparedness, payments and cloud business (ii) Applicable data localisation requirements (iii) Privacy by design frameworks
-
On (i) Data protection and privacy regulations relating to the banking business (ii) The validity of e–signatures and electronic contracts
-
On (i) Data sharing strategies (ii) Establishing a framework for its digital business
-
On data privacy laws relating to its terms and conditions for the use, storage and handling of employee related sensitive personal data
-
On setting up and aligning its data protection and cybersecurity framework across business verticals
-
On (i) Drafting and preparing the privacy policy for its online fantasy gaming website (ii) Applicable data privacy laws in India
-
On applicable data privacy laws in relation to its global data processing and outsourcing centres in India
-
On data privacy laws in the context of its privacy statements and policies for customer cards
-
On its privacy policy for the Junior National Basketball Association Program, in accordance with the data privacy regulations in India
-
On issues relating to the notice requirements for its collection, handling, disclosure and transfer of personal information, including sensitive personal data or information
-
On (i) Content liability issues under the Information Technology Act, 2000 (ii) Preparing the privacy policy and terms of use for its website, ‘www.hotstar.com’ and associated mobile applications
-
On the privacy and data protection aspects of (i) The storage, management and transfer of subscriber data for digital customer programs and payment facilities (ii) The handling and transfer of subscriber data for vehicle technologies, card vault technologies and M2M businesses
-
With respect to privacy considerations relating to the launch of vehicle technologies
-
On data privacy laws in India relating to its agreement with a payroll service provider and terms and conditions for the use, storage and handling of employee related sensitive personal data