Spice Route Legal provides comprehensive services across the full spectrum of data-related matters, covering compliance, advisory and product structuring, global data transfers, and cybersecurity. The practice is led by Mathew Chacko, who advises on Indian legislation such as the Digital Personal Data Protection Act, 2023, as well as internationally significant frameworks including the GDPR and CCPA. Aadya Misra also leads the firm and has expertise that includes data protection and privacy policies, compliance, incident response, and regulatory guidance. Ankita Hariramani stands out for her specialised focus on financial data.
Legal 500 Editorial commentary

Accolades

Client satisfaction: Sector knowledge

Testimonials

Collated independently by Legal 500 research team.

  • ‘The three words I would use to describe the team are commercial, responsive & dynamic. They are also incredibly pleasant to work with.’

  • ‘Aadya Misra- so clever and an expert in her field. Rises to the occasion when required to take a hard stance with the other side.'

  • 'Mathew Chacko - accommodating, smart and commercial. Knows when to dig in and when to concede. Really great to work with. ’

  • ‘Spice Route Legal stands out as a firm that not only understands the letter of the law—but also the pace and nuance of emerging technologies.’

  • ‘Mathew Chacko and his team bridge the gap between privacy and technology divide seamlessly, making them invaluable in high-stakes decisions involving innovation, compliance, and risk.'

  • 'When it comes to negotiating vendor contracts with complex privacy obligations, I trust them implicitly.’

Key clients

  • Aditya Birla Group
  • Adobe Inc.
  • Air India
  • Bayer (Monsanto Holdings Private Limited)
  • CureCollect
  • Exotel
  • Fiserv
  • Flutter Entertainment plc
  • Gameopedia
  • Google LLC
  • HDFC Bank
  • ICICI Bank

Work highlights

Advised Air India on multiple global matters, including data aspects of the Air India-Vistara merger, cookie implementation in over 50 jurisdictions, and structured and negotiated over 200 complex data processing agreements in connection with its digitisation exercises.
Advising Gameopedia on contractual and technical safeguards –including AI-specific clauses and data watermarking –to prevent the reverse engineering and misuse of its proprietary gaming data by licensees.
Assisting Mave Health with navigating US and Indian regulatory frameworks –including HIPAA and CCPA compliance –to assist with the cross-border launch of its AI-driven mental wellness platform and tDCS medical device.

Lawyers

Leading partners

The strongest partners in their field, leading on market-leading deals and endorsed by peers and clients alike.

Next Generation Partners

Junior partners with significant recognition from clients and peers in the market and key roles on multiple matters.

Aadya Misra

Practice head

Mathew Chacko; Aadya Misra

Other key lawyers

Ankita Hariramani