The definitive resource for privacy operations teams.

Why iConsent, and Why Now?

For years, businesses have been focused on collecting data.

India Has a Data Protection Law. The Bigger Question Is: Are Your Systems Ready?

Most conversations around data protection begin with legal readiness.

DPDPA Is Not Just a Legal Change. It Is an Operating Model Change.

When a new regulation arrives, the instinctive organisational response is predictable.

The Privacy Problem Most Organisations Don't Know They Have

Ask an organisation whether it collects personal data and the answer will usually be yes.

You Cannot Protect Data You Cannot See

Privacy begins with visibility. Before an organisation can govern personal data, it first has to know what it holds, where it lives, why it exists and how it moves.

Why Data Classification Is the First Step Towards Privacy

Not all data creates the same risk, carries the same meaning or requires the same control. Classification turns an undifferentiated data estate into something an organisation…

Personal Data Is Everywhere. Do You Know Where Yours Lives?

The difficult privacy question is rarely whether an organisation has personal data. It is whether the organisation can trace that data across systems, copies, integrations…

Structured vs Unstructured Data: The Blind Spot in Privacy Programmes

Databases are easier to map because they have fields, schemas and owners. Privacy risk becomes harder when personal data lives inside documents, emails, images, attachments…

Consent Is Not a Checkbox. It Is a Data Relationship.

For years, digital consent has been represented by one of the smallest elements on a screen: a checkbox.

From Privacy Policy to Purpose: Why Organisations Need to Rethink Notice

Most organisations already have a privacy policy. Many are detailed, legally reviewed and publicly available.

One Customer. Ten Purposes. Why Consent Must Become Granular.

A customer is one person.

Giving Consent Is Easy. Managing Its Lifecycle Is the Real Challenge.

Capturing consent is easy to demonstrate.

What Happens After a User Withdraws Consent?

Withdrawal looks like a simple user action. Operationally, it is a chain of decisions, system events, dependencies and evidence that must travel through the enterprise.

RoPA: The Map Behind a Mature Privacy Programme

A Record of Processing Activities is more than a compliance spreadsheet. Used properly, it becomes the operating map that connects data, purpose, systems, teams and third…

Data Retention: Why 'Keep Everything' Is No Longer a Strategy

Storage may be cheap, but indefinite retention creates privacy, security and operational debt. Mature organisations need to know not only what to keep, but why they are still…

From Consent to Deletion: Understanding the Personal Data Lifecycle

Privacy cannot be managed as isolated controls. Personal data moves through a lifecycle, and every stage creates a different governance question.

Can Your Organisation Prove Why It Is Processing This Data?

Modern organisations are good at proving that data exists. The harder question is whether they can prove the purpose, permission and decision trail behind its use.

Privacy by Design: What Does It Actually Mean for Product Teams?

Privacy by design becomes useful only when it changes product requirements, data models, interfaces and release decisions — not when it appears as a principle at the end of a…

APIs, ERP, CRM and Consent: Why Privacy Cannot Live in a Separate System

A standalone consent repository may know what the user decided. The enterprise systems processing the data also need to know what that decision means.

The Privacy Audit Trail: When Compliance Needs Evidence, Not Assurances

A privacy programme is difficult to defend if its controls cannot be reconstructed. Auditability means preserving the sequence of decisions, events and actions behind…

AI Has a Data Governance Problem Before It Has an AI Governance Problem

Before an organisation can govern an AI model, it needs to understand the data entering that model — where it came from, why it exists, what it contains and whether its use…

Consent in the Age of AI: Is Yesterday's Permission Enough for Tomorrow's Use?

AI creates new uses from old data. That makes one privacy question increasingly important: when the purpose changes, how far can an organisation rely on a decision made in a…

Data Minimisation May Become a Competitive Advantage

For years, collecting more data was associated with better intelligence. In a privacy- and AI-led economy, organisations that know exactly what they need — and deliberately…

From Compliance to Trust Infrastructure: What Comes After DPDPA?

The first phase of privacy maturity is understanding the law. The next is building infrastructure that allows trust, purpose, control and evidence to operate continuously…