SINGH & SETHI · LAW · DATA · TECHNOLOGY · INDIA

Compliance, done properly.

Counsel across the DPDP Act for Indian business.

We build your path to compliance and leave you with frameworks made to run, not to read. Data protection, privacy and digital-compliance counsel. DPDPA and GDPR, side by side, across every sector.

S&S
PRACTICE
Data Protection
Strategy · Governance · Compliance
01 · APPROACH

Three disciplines, one engagement.

I · STRATEGY

Strategy

We start with your business and your risk, not a template. A clear view of what the law, from the DPDP Act and the IT Act to GDPR where you serve EU users, means for how you actually operate.

II · GOVERNANCE

Governance

The structures that keep you compliant after we step back: ownership, oversight and decision-making, with documented roles and records.

III · COMPLIANCE

Compliance

The frameworks, policies and controls themselves, built, documented and handed to your team ready to run.

02 · PRACTICE

Issues that cross every sector.

One counsel across data protection, privacy and digital compliance · from first assessment to a programme you own. Select a practice area.
P·01Data protection & privacy+

Digital Personal Data Protection Act readiness, end to end: assessment, consent architecture, notices, records and grievance handling, with GDPR alignment where your users or clients require it.

P·02Data & IT law+

Policies, consent and processing frameworks, plus IT Act and cyber-law compliance, built around how data actually moves through your product and your vendors.

P·03AI governance+

Responsible-AI controls and risk frameworks for data-driven products: oversight, documentation and policy for teams shipping models, not just writing about them.

P·04Contracts+

NDAs, DPAs, vendor and service agreements, and terms, drafted to work with your compliance posture rather than against it.

P·05Corporate advisory+

Compliance strategy, internal policy and governance for growing companies, scoped to early-stage realities, priced and agreed up front.

P·06Audits & review+

Independent assessment of where you stand and what is exposed: what holds, what needs work, and what to fix first.

03 · WHY US

Counsel that respects your runway and your roadmap.

a.
Business-firstFramed around your model, not abstract risk.
b.
Clear timelinesA realistic schedule agreed after we scope the work.
c.
Plain languageNo jargon. Your team can use what we hand over.
d.
Direct accessYou work directly with senior counsel, start to finish.
e.
Defined scopeClear deliverables and costs agreed before we start.
f.
Built to runProgrammes that live in your business, day to day.
04 · ENGAGEMENT

A clear path, start to finish.

S·01

Make an enquiry

An initial conversation to understand your business and what you need.

S·02

Assessment

We map your obligations and where you stand against them.

S·03

Scope & proposal

A fixed-scope plan with clear deliverables and timeline.

S·04

Delivery

The programme built, documented and handed to your team.

S·05

Handover

A walkthrough so compliance holds after we step back.

05 · SECTORS

Obligations apply across every sector.

Privacy, IP, contracts and governance questions can arise in any sector. The industries below are illustrative of where these issues commonly come up.
IND · 01Agriculture
IND · 02Mining
IND · 03Renewable Energy
IND · 04Artificial Intelligence
IND · 05Heavy Industry
IND · 06Automotive
IND · 07Software
IND · 08Cloud Infrastructure
IND · 09Telecommunications
IND · 10Logistics
IND · 11Transportation
IND · 12Finance
IND · 13Law
IND · 14Public Administration
IND · 15Research
HOVER TO EXPLORE · DRAG OR USE ARROWS
06 · QUESTIONS

Asked first.

What does the firm actually do?

Three things, run together: strategy, governance and compliance. In practice that means privacy programmes, contracts, AI governance frameworks, audits and corporate advisory, built around how your business actually operates.

Do you only handle data protection?

No. Data protection is one of several practices. We also handle IP and brand protection, commercial contracts, AI governance, technology and IT-law questions, and corporate advisory across sectors.

Can you draft and review contracts?

Yes. NDAs, DPAs, vendor and service agreements, employment documents and terms. Everything is drafted to work with your compliance posture rather than against it.

How do you scope and price an engagement?

We start with a short assessment, then agree a fixed scope with clear deliverables and a price up front, before you commit. Work spans privacy, IP, contracts, AI governance and corporate advisory, and we tell you honestly where you do and do not need us.

How long does an engagement take?

Most early-stage programmes run in weeks rather than months. We confirm a realistic timeline after the first assessment, before you commit to anything.

Is this confidential?

We treat enquiries with care and discretion. An initial enquiry is not by itself a client engagement, and does not create a lawyer-client relationship or legal privilege until we have completed conflict checks and agreed terms. Please do not send confidential or privileged details in this first message.

07 · EXPOSURE

The cost of getting this wrong.

Enforcement is no longer theoretical, in Europe or in India. These figures are why compliance belongs on the board agenda, not the backlog.
TIME TO THE 2027 COMPLIANCE DEADLINE
000DAYS
:
00HOURS
:
00MINUTES
INDICATIVE · BASED ON THE PHASED DPDP RULES TIMELINE · ONE OF SEVERAL REGIMES WE COVER
GDPR fines issued since 2018 (cumulative)
€0B
Passed €5B for the first time in 2024 · CMS GDPR Enforcement Tracker, 2025
Largest single GDPR fine to date
€0B
Meta, Ireland DPA, 2023 · for unlawful EU–US data transfers
DPDP Act, 2023 maximum penalty per default
₹0 Cr
Statutory maximum, Schedule to the DPDP Act, 2023 · not a per-breach total; actual penalties are set case by case
GDPR fines by year, 2019–2024
EUR, ALL EU AUTHORITIES · HOVER OR TAP A BAR
SELECT A YEAR
SOURCES: CMS GDPR ENFORCEMENT TRACKER (2025) · FINTECH GLOBAL / ATLAS VPN (2019–2021) · FIGURES ARE APPROXIMATE ANNUAL TOTALS, NOT LIVE · DPDP ACT ENFORCEMENT DATA IS STILL EMERGING
08 · THE TEAM

The people behind the counsel.

Direct access to the lawyers handling your matter, across privacy, IP, contracts and corporate advisory.
Shaurya Singh portrait
Shaurya SinghDATA PRIVACY & COMPLIANCE
Shivom Sethi portrait
Shivom SethiADVOCATE · LITIGATION & DISPUTE RESOLUTION
09 · VOICES

What clients say.

Illustrative of the feedback the practice works toward. Replace with real, permissioned quotes once available.
10 · BEGIN

Find out where you stand.

Request a confidential compliance review. We'll give you an honest read on your exposure and what a fixed-scope engagement looks like.

11 · ENQUIRY

A confidential first conversation.

Share a few details. We'll respond with an honest read on where you stand and how we can help.

→ RESPONSE WITHIN 24 HOURS
→ HANDLED WITH CARE AND DISCRETION
→ NO OBLIGATION FROM AN INITIAL ENQUIRY

An initial enquiry is not a client engagement and does not create a lawyer-client relationship or legal privilege. Please do not include confidential or privileged information in this form. We will confirm next steps after conflict checks and engagement terms.

PREFER TO TALK? MESSAGE US ON WHATSAPP

12 · OFFICE

Where to find us.

CHAMBERS
M 12, Jungpura Extension
New Delhi, Delhi 110014
India
AREAJungpura · Central Delhi
BY APPOINTMENTMon–Sat
Get directions →
M 12 · JUNGPURA EXT
OPEN IN MAPS →
Make an enquiry WhatsApp