Privacy education, consultancy & implementation, in 50+ jurisdictions.contact@vedhacon.com
Asia-Pacific
IndiaDPDP Act 2023 & Rules 2025 ChinaPIPL, DSL & CSL Japan & South KoreaAPPI and PIPA South East AsiaSix ASEAN regimes compared Australia & New ZealandPrivacy Act 1988 and Privacy Act 2020
Europe
European UnionGDPR, obligations & implementation United KingdomUK GDPR and DPA 2018 Switzerland & EEArevFADP and EEA adoption Türkiye & wider EuropeKVKK, Serbia, Ukraine, Russia EU AI ActRisk tiers and privacy overlap
Americas, Middle East & Africa
CaliforniaCCPA / CPRA consumer rights United StatesState laws and sectoral rules Canada & Latin AmericaPIPEDA, Law 25, LGPD and more Middle EastUAE, Saudi Arabia, Qatar, Bahrain, Oman AfricaNDPA, POPIA, Kenya DPA and more
Plain-language guides for 50+ jurisdictions, updated as the law changes.Browse every jurisdiction
Featured jurisdictionIndia, DPDP Act 2023

Notice, consent, Data Fiduciary duties, SDF obligations and breach intimation, explained.

Open the guide
How we help
Privacy educationBoards, engineers, HR & legal Consultancy & DPOStrategy, gap analysis, DPO as a service ImplementationData mapping, notices, consent, DPIAs Certification readinessISO/IEC 27001, 27701 & 42001 Audit & assuranceInternal audit and evidence packs AI governanceControls for models in production Breach & incident responsePlaybooks, drills and notification All servicesThe full engagement model
Where most engagements startA readiness assessment, then a plan

We scope against the laws that actually apply to you, then sequence the work by risk.

Start the assessment
By type
WhitepapersIn-depth research & briefings BlogNotes from practitioners News & updatesRegulatory change, explained GuidesPractical how-to resources
Featured whitepaperThe DPDP implementation clock

What must be operational before the substantive obligations commence in 2027.

Read the briefing
Diagnostics & toolkits
Readiness checker18-question diagnostic DPIA & RoPA templatesReady-to-adopt toolkits Consent & vendor toolsRegisters & questionnaires Regulatory trackerHorizon scanning More ToolsThe full toolkit
Free, no sign-upCheck your readiness in 10 minutes

Answer 18 questions and get a prioritised control roadmap instantly.

Start the assessment
Grow your expertise
GRC AcademyFrom zero to practitioner AI ExplainedAI, GenAI & RPA in plain English CommunityAsk a moderator AI AssistantAnswers in seconds Learning tracksFoundation to certification Careers in GRCEnter from any background Expert networkContribute & mentor
Free, alwaysZero to practitioner

Track 01 assumes no prior knowledge of governance, risk and compliance.

Start Track 01
Insights

Analysis, news and guidance in one place

Whitepapers, blog posts, regulatory updates and practical guides, all written by practitioners who build and audit privacy programmes for a living.

Read whitepapers Visit the blog
Explore by type

Four ways in

Whitepapers

Long-form research on implementation timelines, AI governance, transfers and audit evidence.

Browse whitepapers

Blog

Shorter notes from the build, what happens when controls meet real systems and deadlines.

Read the blog

Guides

Practical how-to resources for notices, consent, DPIAs, RoPA and breach response.

See guides

Regulatory updates

Amendments and commencements across the jurisdictions you operate in.

Open the tracker
Latest

What changed, and what it means

All posts
05 Sep 2026The DPDP implementation clock: what must be operational before 202712 min read 28 Aug 2026DPIA templates are not DPIAs4 min read 21 Aug 2026AI governance after experimentation: the control model for production15 min read 14 Aug 2026What "certain legitimate uses" actually means under the DPDP Act6 min read 13 Aug 2026Regulatory tracker adds commencement monitoring across ASEAN2 min read
Never miss an update

Insights, in your inbox

Regulatory change, implementation notes and audit lessons, written by people who do the work.

Subscribe