16/08/2026
Rule 8, DPDP Rules, 2025: data retained for one purpose — medical care — cannot simply be repurposed for another — marketing analytics — even within a lawful retention window. Regulatory retention and analytics use are separate activities requiring separate legal bases. IS Audit 3.0 (Section 6.4.5) flags the absence of consent audit trails as a leading analytics governance risk.
DPDP 3.5.2: DPDP and Data Analytics – Healthcare Analytics
The Scenario Harini is the CFO of a mid-sized private hospital group in Tamil Nadu. The group had invested significantly in a business intelligence platform, which pulled data from their hospital m…
15/08/2026
Descriptive analytics tells you what happened. Predictive analytics forecasts what will happen. Cognitive analytics creates new knowledge about you — including facts about yourself that you didn't know. All of it runs on personal data. All of it is governed by the DPDP Act, 2023. Episode 5 of DPDP Meets Emerging Technologies.
DPDP 3.5.1: DPDP and Data Analytics
INTRODUCTION Data analytics and DPDP compliance may appear to be an unlikely pairing. One is a business tool. The other is a legal framework. Yet they collide precisely because analytics, at its mo…
06/08/2026
Heartiest congratulations on successfully clearing Group IV of the CMA Final Examinations.
06/08/2026
Heartiest congratulations on successfully clearing CMA Intermediate Examinations..
06/08/2026
Heartiest congratulations on successfully clearing Group IV of the CMA Final Examination..
06/08/2026
Heartiest congratulations on successfully clearing Group I of the CMA Intermediate Examination..
06/08/2026
Heartiest congratulations on successfully clearing Group III of the CMA Final..
06/08/2026
Heartiest congratulations! Neethu P
We are proud of your success and wish you continued excellence in your professional journey.
02/08/2026
DPDP & IoT: Case Study 3 of 3
Five smart devices. Four manufacturers. Zero co-ordinated consent. Lakshmi's smart home collected her conversations, her grocery habits, and her daily routines. Ads appeared for products she had only discussed at home. When she asked for deletion, she was told the data had already been shared with technology partners. Under Rule 3 of the DPDP Rules, 2025, every device manufacturer must issue a plain-language, itemised consent notice before collection begins. Under Section 12(3) of the DPDP Act, erasure requests must propagate to every downstream data partner. Under Section 9, children's voice data collected by a smart home device requires verifiable parental consent. Penalty for Section 9 violations: up to ₹150 crore. The Puttaswamy judgment (2018) called this era one of ubiquitous dataveillance. Indian law now governs it. The deadline is 13 May 2027.
DPDP 3.1.3: DPDP and Internet of Things (IoT) – Case Study 3 – Lakshmi’s Smart Home and the Data That Left the House
The Scenario Lakshmi is a homemaker in Bengaluru. Her family uses a suite of smart home devices — a connected doorbell with a camera, a voice-activated home assistant, smart lighting controlled by …