TrustNiq guideshttps://trustniq.com/resources/2026-09-28T00:00:00ZSignificant Data Fiduciary obligations: DPO, DPIA, audithttps://trustniq.com/resources/significant-data-fiduciary-obligations/2026-09-28T00:00:00ZSignificant Data Fiduciary duties under the DPDP Act: a DPO in India, an independent auditor, annual DPIA and audit, and algorithmic due diligence.Shadow AI and personal data: governing AI tools under DPDPhttps://trustniq.com/resources/shadow-ai-dpdp/2026-09-28T00:00:00ZPasting customer data into AI tools is processing under the DPDP Act. How to find shadow AI, what AI vendors need, and an AI governance checklist.Mapping DPDP to ISO 27001 and SOC 2: collect evidence oncehttps://trustniq.com/resources/dpdp-iso-27001-soc-2-mapping/2026-09-28T00:00:00ZHow DPDP and CERT-In obligations map to ISO 27001:2022, NIST CSF 2.0 and SOC 2, and how to use one control library and one set of evidence.Log retention in India: CERT-In 180 days, DPDP one yearhttps://trustniq.com/resources/log-retention-cert-in-dpdp/2026-09-28T00:00:00ZHow long to keep logs in India: CERT-In's 180 days within India and one year under the DPDP Rules, which logs count, time sync and a checklist.Data retention and erasure under the DPDP Acthttps://trustniq.com/resources/dpdp-data-retention-and-erasure/2026-09-28T00:00:00ZWhen the DPDP Act requires erasure, how long data may be kept, the 48-hour notice for large platforms, logs, backups and processors.Data Principal rights under DPDP and the 90-day rulehttps://trustniq.com/resources/dpdp-data-principal-rights/2026-09-28T00:00:00ZData Principal rights under the DPDP Act: access, correction, erasure, grievance and nomination, the 90-day response limit and a workable process.DPDP breach notification: the Board, users and 72 hourshttps://trustniq.com/resources/dpdp-breach-notification/2026-09-28T00:00:00ZEvery personal data breach must be reported to the Data Protection Board and each affected person. What to send, when, and how CERT-In fits in.DPDP Rules 2025 timeline: key dates to May 2027https://trustniq.com/resources/dpdp-rules-2025-timeline/2026-09-28T00:00:00ZThe DPDP Rules 2025 were notified on 14 November 2025 with an 18-month phase-in. What applied first, what starts in November 2026 and in May 2027.DPDP Act vs GDPR: key differences for Indian companieshttps://trustniq.com/resources/dpdp-vs-gdpr/2026-09-28T00:00:00ZHow India's DPDP Act differs from GDPR: scope, lawful bases, breach reporting, children, transfers, rights and penalties, and what carries over.DPDP Act penalties: what the ₹250 crore figure covershttps://trustniq.com/resources/dpdp-act-penalties/2026-09-28T00:00:00ZThe DPDP Act Schedule sets penalties from ₹10,000 to ₹250 crore. Which failures attract which maximum, and how the Data Protection Board decides.DPDP Act compliance checklist for Indian businesseshttps://trustniq.com/resources/dpdp-compliance-checklist/2026-09-28T00:00:00ZA 12-step DPDP Act 2023 and DPDP Rules 2025 checklist: inventory, lawful basis, notice, consent, security, breaches, erasure, rights and vendors.Consent and notice under the DPDP Act: a practical guidehttps://trustniq.com/resources/dpdp-consent-and-notice/2026-09-28T00:00:00ZWhat valid consent and notice look like under the DPDP Act 2023: the five conditions, notice contents, languages, withdrawal and legitimate uses.Children's personal data under the DPDP Acthttps://trustniq.com/resources/dpdp-childrens-data/2026-09-28T00:00:00ZA child is anyone under 18 under the DPDP Act. Verifiable parental consent, the ban on tracking and targeted ads, exemptions and the ₹200 crore penalty.CERT-In 6-hour incident reporting: a practical guidehttps://trustniq.com/resources/cert-in-6-hour-incident-reporting/2026-09-28T00:00:00ZCERT-In's April 2022 Directions: report cyber incidents within 6 hours, keep 180 days of logs in India, sync to NIC/NPL time. A step-by-step guide.