IAPP Europe Congress 2026
Privacy | AI governance | Cybersecurity law
BRUSSELS
16-19 November
India's Data Protection Law Update: Compare and Leverage EU and US Compliance
Thursday, 19 Nov.
14:45 - 15:45 CET
Intermediate level
Global businesses must address India's new privacy law, the Digital Personal Data Protection Act, in their privacy programs. Some must consider “data embassy” arrangements for data centers. Most provisions and their extra-territorial reach will come into force in 2027. India's landmark regime empowers users and places significant responsibilities to handle digital information ethically, securely and with a high degree of transparency. The Indian law draws inspiration from the principles of the GDPR but is tailored and scaled for India. How does the law compare with U.S. law, U.K. and EU law? What are the powers of the new Data Protection Board of India? What must a global company consider in terms of cross border data flows, legal bases for collection and protections for children's and employees' data? How will the DPBI focus its enforcement work? How would your preparedness need to be re-evaluated, should you be declared a significant data fiduciary? Gain practical guidance on how to address new requirements and enforcement trends and have your questions answered by experts in Indian, U.S., EU and U.K. law, regulation and enforcement.
What you will learn:
- Determine how India's Digital Data Protection Act applies to your company and what are the likely chances your business is declared a significant data fiduciary.
- Introduction and updates on compliance strategies, data governance strategies, new AI rules and risk mitigation.
- Learn how you can leverage EU, U.K., GDPR and California CCPA compliance measures to ensure compliance with the Indian law.
Featured in this session

Claire Bernier
Partner
Adsto

Elizabeth Denham
Chair
Jersey Data Protection Authority

Lothar Determann
Partner
Baker McKenzie

Sajai Singh
Chair, IBA Technology Law Committee; Partner
J. Sagar Associates