Spice Route Legal’s data protection team offers unparalleled expertise on data protection and privacy-related issues. We count among our clients many of the world’s largest companies, whom we regularly advise on establishing and operationalising data protection strategies, drafting various privacy policies, identifying data security risks and adopting mitigation strategies, compliance related to consumer data, storing and using data obtained from KYC requirements, framing cookie policies and adopting advertising and marketing policies. Our team also has experience in cross border data transfer guidelines and compliances and data breach preparedness and response.
Representative Matters
- Assisting an India-based microfinance platform design and implement its data
- protection practices for over 10 million small and medium-sized enterprise users
Advising a not-for-profit collective of account aggregators – entities licensed by the
Reserve Bank of India to facilitate users’ control over data collection practices – on protocols for transfer of data in the fintech sector
Advised an American medical devices manufacturer on Indian law aspects of setting up employee-related data collection practices
Assisted an influencer marketing conglomerate navigate a high-risk data breach incident across India, the United States, and Australia
Designed the privacy framework for medical device and diagnostic companies headquartered in the US and Singapore
Publications
