
Presents
The Data Protection
Dialogue
Navigating the Path to DPDP Readiness

Presents
Navigating the Path to DPDP Readiness

As India moves closer to the full implementation of the Digital Personal Data Protection (DPDP) framework, organizations are entering a critical phase of compliance preparedness. With key obligations around consent management, children's data, Data Principal rights, governance, accountability, and breach notification expected to come into force by May 2027, businesses are now making significant operational, legal, and technological decisions.
To facilitate a constructive industry conversation, IAMAI is convening a select group of senior leaders for a closed-door dialogue focused on the practical realities of implementing data protection obligations at scale.
Conducted under Chatham House Rules, the discussion will provide an opportunity for candid exchange of perspectives, implementation experiences, emerging practices, and key areas where additional regulatory clarity may be required.
The Digital Personal Data Protection framework will require organizations to make significant changes to how personal data is collected, processed, governed, and protected. As implementation efforts gather pace, industry continues to grapple with questions relating to consent, children's privacy, Data Principal rights, governance requirements, breach notification, cross-border transfers, and AI-driven processing.
This dialogue provides a platform for senior industry leaders to discuss implementation challenges, share emerging approaches, and contribute to a broader understanding of what DPDP readiness will require in practice.
Exploring approaches to consent management, user notices, consent withdrawal mechanisms, and implementation challenges for existing users.
Examining operational considerations around age verification, verifiable parental consent, and restrictions relating to minors' data.
Discussing mechanisms for access, correction, erasure, grievance redressal, and delegated rights management.
Preparing for organizational obligations relating to governance frameworks, audits, accountability measures, and compliance oversight.
Understanding incident response readiness, notification requirements, and evolving expectations around breach management.
Exploring operational and legal considerations relating to international data transfers, localization strategies, and data governance.
Assessing emerging compliance considerations relating to AI systems, automated decision-making, and responsible data use.
Exploring approaches to consent management, user notices, consent withdrawal mechanisms, and implementation challenges for existing users.
Examining operational considerations around age verification, verifiable parental consent, and restrictions relating to minors' data.
Discussing mechanisms for access, correction, erasure, grievance redressal, and delegated rights management.
Preparing for organizational obligations relating to governance frameworks, audits, accountability measures, and compliance oversight.
Understanding incident response readiness, notification requirements, and evolving expectations around breach management.
Exploring operational and legal considerations relating to international data transfers, localization strategies, and data governance.
Assessing emerging compliance considerations relating to AI systems, automated decision-making, and responsible data use.
Exploring approaches to consent management, user notices, consent withdrawal mechanisms, and implementation challenges for existing users.
Examining operational considerations around age verification, verifiable parental consent, and restrictions relating to minors' data.
Discussing mechanisms for access, correction, erasure, grievance redressal, and delegated rights management.
Preparing for organizational obligations relating to governance frameworks, audits, accountability measures, and compliance oversight.
Understanding incident response readiness, notification requirements, and evolving expectations around breach management.
Exploring operational and legal considerations relating to international data transfers, localization strategies, and data governance.
Assessing emerging compliance considerations relating to AI systems, automated decision-making, and responsible data use.

Closed-door industry dialogue.

30-35 invited leaders from legal, compliance, privacy, public policy, risk, governance, trust & safety, and technology functions.

Roundtable discussion designed to encourage peer learning, practical insights, and open dialogue.

The session will be preceded by a networking lunch, providing participants with an opportunity to engage with fellow industry leaders before the discussion begins.
Representatives from internet platforms, fintech companies, digital businesses, e-commerce organizations, SaaS providers, AI companies, telecom operators, and other data-driven enterprises are encouraged to express interest.
The dialogue aims to facilitate meaningful industry exchange on implementation approaches, operational challenges, and compliance priorities under the DPDP framework.
Insights emerging from the discussion may be consolidated into a non-attributable industry note highlighting key themes, practical considerations, and areas where further engagement and clarity may benefit the broader ecosystem.
Participation is limited to invited delegates to ensure a focused and high-quality discussion.
If you are a senior professional responsible for privacy, compliance, governance, legal, policy, risk, or data protection within your organization, we invite you to express your interest in attending.
