Acting for large domestic and multinational corporations, IndusLaw has a broad data protection practice that is adept at handling all aspects of data processing, protection, and optimisation, as well as advising on data breach responses and compliance frameworks. With significant expertise in international data law frameworks such as the GDPR, international and cross-border mandates are a notable area of strength for the team. Practice co-head Namita Viswanath, based in Bengaluru, has a broad data privacy practice focused on regulatory, policy, and compliance issues for clients across a broad spectrum of industries, with particular emphasis on emerging technologies and the fintech sectors. Founding partners Suneeth Katarki and Avimukt Dar oversee the department from the Bengaluru and New Delhi offices, respectively. Also in New Delhi, Shreya Suri is recommended for her ‘well-rounded and practical advice'; she has a broad practice that covers compliance, regulatory, and commercial matters for clients in the telecoms and e-commerce sectors.

Jointly led by Supratim Chakraborty and Harsh Walia, the data protection team at Khaitan & Co. stands out for its multidisciplinary approach. Drawing together specialists from various practice areas such as TMT, corporate, IP, and competition, the practice runs the gamut of advisory matters across industries such as fintech, e-commerce, insurance, and securities markets. In Kolkata, the ‘very proactive' Chakraborty advises on emerging legislation as well as the data aspects of major transactional matters. In New Delhi, Walia is routinely instructed by large tech companies, regulatory authorities, and media organisations on cross-border data transfers and security mandates; counsel Shobhit Chandra is another key name here. Also in Delhi is telecoms regulatory and data protection specialist Abhinav Chandan.

Multinationals from a diverse range of sectors regularly instruct Spice Route Legal’s dedicated data protection, privacy, and cybersecurity team for advice across the full gamut of advisory, regulatory, and contentious matters. The Bengaluru-based team is led by co-founder Mathew Chacko, a seasoned data privacy specialist with strength in complex cross-border data protection mandates and regulatory issues, as well as data-related disputes. Aadya Misra, who is now a counsel, advises clients on emerging technologies, regulatory advisory matters, and incident reports, and has particular expertise handling major financial services data transfers from the EU to India, following the Schrems II decision. On the cybersecurity front, the team has seen increased activity concerning data breach response mandates.

Advising government entities, industry bodies, and large multinationals, the data protection offering at Trilegal spans the full range of advisory, strategic, and compliance matters. Counting major international tech entities among its impressive roster of clients, the Bengaluru-based team handles cross-border data transfers, emerging legislation compliance, and data breaches and cybersecurity incidents. Founding partner Rahul Matthan now heads the team, while former co-heads Nikhil Narendran and Jyotsna Jayaram remain with the practice. Matthan is a seasoned expert specialising in tech, regulatory, and e-commerce matters; TMT and corporate specialist Narendran advises blue-chip technology companies on data protection policies and practices, while Jayaram has recently assisted clients in the fintech, healthtech, and digital content sectors on sectoral data regulations and data-related transactional mandates.

Nishith Desai Associates' dedicated data protection and privacy practice is adept at advising on all aspects of data, with expertise in personal data privacy, geospatial data matters, and novel issues related to emerging technologies such as AI. Acting for multinational corporations, the team takes an industry-focused approach and has particular strength in advising on domestic and international data protection laws. In Mumbai, Gowree Gokhale is recommended for her sector expertise across the pharma and tech industries; Bengaluru-based Huzefa Tavawalla focuses on matters relating to disruptive technologies as well as data-heavy transactions. Gokhale and Tavawalla now jointly co-head the team following the 2023 departure of former co-head Aarushi Jain to Cyril Amarchand Mangaldas. 2023 also saw the departure of Indrajeet Sircar to an in-house position.

DSK Legal’s data protection offering spans the full range of mandates, handling compliance, data transfer and sharing arrangements, as well as advising on security incidents and breach responses for a diverse roster of clients. Rishi Anand heads the firm’s technology practice and co-heads the data protection team, advising large multinationals and domestic corporates on the data protection implications of corporate transactions and cross-border M&A. Anand works alongside co-head Nakul Batra, a corporate and M&A expert and qualified computer science engineer; the duo is based in New Delhi.

Leveraging the firm’s broader corporate, commercial, and transactional capabilities, Samvad Partners has extensive experience advising on cybersecurity, online privacy, and data protection issues, handling both advisory and contentious matters. The team is jointly led by Rohan George, based in Chennai, and Nivedita Nivargi, in Bengaluru. George advises Indian and international clients in the emerging tech sector on data protection aspects of compliance, licensing, and contracting. TMT specialist Nivargi has a broad practice and advises on data protection issues in the fintech, blockchain, and aerospace industries.

AZB & Partners' multidisciplinary data protection offering has considerable expertise in healthcare, IT, e-commerce, and emerging technologies, and handles both advisory, transactional, and compliance mandates both domestically and across borders. Key members of the team include Mumbai-based IP and IT specialist Nandan Pendsey, recommended for his regulatory expertise, as well as Rachit Bahl and Rohan Bagai, both in Delhi; Bahl advises multinational corporations on the data privacy and protection aspects of e-commerce, online healthcare, and surveillance issues, while Bagai has a special focus on payments and emerging technologies, routinely acting for fintech businesses.

Majmudar & Partners leverages its considerable TMT practice to assist clients in the tech, IT, telecoms, and e-commerce sectors on a range of data protection issues, including regulatory, compliance, and transactional matters. Akil Hirani, Neerav Merchant and N. Raja Sujith jointly oversee the practice. Sujith, based in Bengaluru, leads the firm’s South India practice and advises on the data protection elements of corporate transactions. Hirani, triple-qualified in India, England and Wales and California, and Merchant, who draws on in-house experience from the software industry, work alongside Sujith and co-lead the practice from Mumbai.