Acting for large domestic and multinational corporations, IndusLaw has a broad data protection practice that is adept at handling all aspects of data processing, protection, and optimisation, as well as advising on data breach responses and compliance frameworks. With significant expertise in international data law frameworks such as the GDPR, international and cross-border mandates are a notable area of strength for the team. Practice co-head Namita Viswanath, based in Bengaluru, has a broad data privacy practice focused on regulatory, policy, and compliance issues for clients across a broad spectrum of industries, with particular emphasis on emerging technologies and the fintech sectors. Founding partners Suneeth Katarki and Avimukt Dar oversee the department from the Bengaluru and New Delhi offices, respectively. Also in New Delhi, Shreya Suri is recommended for her ‘well-rounded and practical advice'; she has a broad practice that covers compliance, regulatory, and commercial matters for clients in the telecoms and e-commerce sectors.

Multinationals from a diverse range of sectors regularly instruct Spice Route Legal’s dedicated data protection, privacy, and cybersecurity team for advice across the full gamut of advisory, regulatory, and contentious matters. The Bengaluru-based team is led by co-founder Mathew Chacko, a seasoned data privacy specialist with strength in complex cross-border data protection mandates and regulatory issues, as well as data-related disputes. Aadya Misra, who is now a counsel, advises clients on emerging technologies, regulatory advisory matters, and incident reports, and has particular expertise handling major financial services data transfers from the EU to India, following the Schrems II decision. On the cybersecurity front, the team has seen increased activity concerning data breach response mandates.

DSK Legal’s data protection offering spans the full range of mandates, handling compliance, data transfer and sharing arrangements, as well as advising on security incidents and breach responses for a diverse roster of clients. Rishi Anand heads the firm’s technology practice and co-heads the data protection team, advising large multinationals and domestic corporates on the data protection implications of corporate transactions and cross-border M&A. Anand works alongside co-head Nakul Batra, a corporate and M&A expert and qualified computer science engineer; the duo is based in New Delhi.

AZB & Partners' multidisciplinary data protection offering has considerable expertise in healthcare, IT, e-commerce, and emerging technologies, and handles both advisory, transactional, and compliance mandates both domestically and across borders. Key members of the team include Mumbai-based IP and IT specialist Nandan Pendsey, recommended for his regulatory expertise, as well as Rachit Bahl and Rohan Bagai, both in Delhi; Bahl advises multinational corporations on the data privacy and protection aspects of e-commerce, online healthcare, and surveillance issues, while Bagai has a special focus on payments and emerging technologies, routinely acting for fintech businesses.

Majmudar & Partners leverages its considerable TMT practice to assist clients in the tech, IT, telecoms, and e-commerce sectors on a range of data protection issues, including regulatory, compliance, and transactional matters. Akil Hirani, Neerav Merchant and N. Raja Sujith jointly oversee the practice. Sujith, based in Bengaluru, leads the firm’s South India practice and advises on the data protection elements of corporate transactions. Hirani, triple-qualified in India, England and Wales and California, and Merchant, who draws on in-house experience from the software industry, work alongside Sujith and co-lead the practice from Mumbai.