Privacy education, consultancy & implementation, in 50+ jurisdictions.contact@vedhacon.com
Asia-Pacific
IndiaDPDP Act 2023 & Rules 2025 ChinaPIPL, DSL & CSL Japan & South KoreaAPPI and PIPA South East AsiaSix ASEAN regimes compared Australia & New ZealandPrivacy Act 1988 and Privacy Act 2020
Europe
European UnionGDPR, obligations & implementation United KingdomUK GDPR and DPA 2018 Switzerland & EEArevFADP and EEA adoption Türkiye & wider EuropeKVKK, Serbia, Ukraine, Russia EU AI ActRisk tiers and privacy overlap
Americas, Middle East & Africa
CaliforniaCCPA / CPRA consumer rights United StatesState laws and sectoral rules Canada & Latin AmericaPIPEDA, Law 25, LGPD and more Middle EastUAE, Saudi Arabia, Qatar, Bahrain, Oman AfricaNDPA, POPIA, Kenya DPA and more
Plain-language guides for 50+ jurisdictions, updated as the law changes.Browse every jurisdiction
Featured jurisdictionIndia, DPDP Act 2023

Notice, consent, Data Fiduciary duties, SDF obligations and breach intimation, explained.

Open the guide
How we help
Privacy educationBoards, engineers, HR & legal Consultancy & DPOStrategy, gap analysis, DPO as a service ImplementationData mapping, notices, consent, DPIAs Certification readinessISO/IEC 27001, 27701 & 42001 Audit & assuranceInternal audit and evidence packs AI governanceControls for models in production Breach & incident responsePlaybooks, drills and notification All servicesThe full engagement model
Where most engagements startA readiness assessment, then a plan

We scope against the laws that actually apply to you, then sequence the work by risk.

Start the assessment
By type
WhitepapersIn-depth research & briefings BlogNotes from practitioners News & updatesRegulatory change, explained GuidesPractical how-to resources
Featured whitepaperThe DPDP implementation clock

What must be operational before the substantive obligations commence in 2027.

Read the briefing
Diagnostics & toolkits
Readiness checker18-question diagnostic DPIA & RoPA templatesReady-to-adopt toolkits Consent & vendor toolsRegisters & questionnaires Regulatory trackerHorizon scanning More ToolsThe full toolkit
Free, no sign-upCheck your readiness in 10 minutes

Answer 18 questions and get a prioritised control roadmap instantly.

Start the assessment
Grow your expertise
GRC AcademyFrom zero to practitioner AI ExplainedAI, GenAI & RPA in plain English CommunityAsk a moderator AI AssistantAnswers in seconds Learning tracksFoundation to certification Careers in GRCEnter from any background Expert networkContribute & mentor
Free, alwaysZero to practitioner

Track 01 assumes no prior knowledge of governance, risk and compliance.

Start Track 01
Whitepapers

In-depth research, written by practitioners

Long-form analysis on the questions that decide programmes, implementation timelines, AI governance, cross-border transfers and audit evidence, grounded in statute and real delivery.

Featured

Latest briefings

All insights
Whitepaper

The DPDP implementation clock

What must be operational before the substantive obligations commence.

India12 min read
Whitepaper

AI governance after experimentation

The control model for moving models into production, and proving it.

AI & standards15 min read
Whitepaper

Cross-border transfers, decided

Choosing a mechanism across GDPR, PIPL and the DPDP regime.

Transfers10 min read
Library

More from the research desk

Consent under GDPR vs the DPDP Act

Where the two regimes align, where they diverge, and what a single consent record must capture.

ISO/IEC 42001 before your first AI release

Is an AI management system worth pursuing early? A cost, control and evidence view.

The Significant Data Fiduciary playbook

DPIA, audit and additional obligations, mapped to a working operating model.

Vendor governance at scale

Processor due diligence, contracts and monitoring for multi-jurisdiction estates.
Stay ahead

Get new whitepapers as they publish

Regulatory change, implementation notes and audit lessons, written by people who do the work.

Subscribe to insights