01What this is
Free documents for practitioners
Short, downloadable practitioner aids — checklists, reference sheets and the like. No email wall, no signup, no form, no tracking. Click, download, use. Nothing on this page collects anything from you.
02Read this first
These documents are general, illustrative and non-exhaustive information. They are not legal advice, not a compliance certification or determination, and do not create an advocate-client relationship. Not every item applies to every business. A real assessment needs the facts of your own processing. Confirm commencement, exemptions, designation notifications and sector rules for your own entity before acting.
03The documents
Three documents, all free, all current
Newest first. Each one is a static PDF — open it in the browser, or save the file. No email required, and nothing on this page collects anything from you.
The Primer, Part 1 — It predicts the next word. That is the whole machine.
The first part of a weekly strand explaining how these systems actually work, from zero, for lawyers who will have to advise on them. What a language model is, why anyone built a next-word guesser in the first place, why a real citation and an invented one are indistinguishable to the mechanism, and what the Digital Personal Data Protection Act, 2023 has to say about any of it. Every term is defined on the page. Includes a word-by-word audit of the Act showing that the entire GDPR Article 22 vocabulary is absent from it.
Where can your data actually go? — a cross-border sheet for Indian companies
What the DPDP framework does on cross-border transfer, what it does not do, and what is actually constraining an Indian company's data exports today. The text of Section 16 and Rule 15, why Rule 15 is a foreign-State provision rather than a commercial transfer mechanism, the localisation power that does sit in Rule 12, a ranked hierarchy of what really binds you, and a one-page "what would have to move if a country were named" test to work through per destination.
DPDP-Readiness Checklist — an operational aid for Indian digital businesses
A non-exhaustive readiness checklist for India's Digital Personal Data Protection Act, 2023 and the Rules made under it. Core obligations plus eight sector overlays — healthtech, fintech, insurtech, HR-tech, adtech, edtech, consumer AI and mobility — with every item cited to the section it comes from.
Both downloads are static files. Opening this page sets no cookie; clicking a link sends one request to GitHub Pages for the file and nothing else. See the Privacy Policy for the full posture.