Technology Law

India doesn't yet have a standalone AI law, which puts most companies deploying AI in a gray zone - bound by existing data protection, consumer protection, and sectoral rules that were never written with machine learning in mind. We were one of the first firms in India to build a dedicated AI regulatory practice for exactly that reason.

A data breach is a legal event as much as a technical one - breach notification deadlines, regulator reporting, and customer liability all kick in the moment something goes wrong, and most companies find that out for the first time during an actual incident. We'd rather get that framework in place before it's tested.

FinTech in India sits at the intersection of RBI guidelines, the Payment and Settlement Systems Act, and a steady stream of new rules on lending, crypto, and digital payments - several of which have shut down business models overnight with very little warning. Staying ahead of that is most of what a good FinTech legal practice actually does.

E-commerce in India sits under the Consumer Protection (E-commerce) Rules, FDI policy restrictions on inventory-based models, and the IT Act, often all three at once for the same transaction. Getting the structure wrong at the start - the wrong FDI route, an unclear return policy - tends to surface as a regulatory problem much later, when it's expensive to fix.

The Digital Personal Data Protection Act, 2023 changed what "compliant" means for any Indian company handling personal data, and a lot of businesses are still running on privacy policies written for a pre-DPDPA world. We help close that gap, alongside GDPR compliance where clients have EU users.