Data Privacy

Also called GDPR and DPDP

The laws and practices governing how you collect, store, and use people's personal data. Major regimes include Europe's GDPR and India's DPDP Act, each with strict rules and real penalties.

Why it matters

Handling personal data carelessly risks heavy fines, lost trust, and blocked deals, especially as you sell to bigger customers or across borders. Building privacy in early is cheaper and safer than retrofitting it under pressure.

For example

A startup handling customer data builds consent flows and deletion tooling to comply with India's DPDP Act and Europe's GDPR before enterprise buyers demand it.

Go deeper

Compliance under the DPDP Act for startups collecting customer data Corrida Legal · article This is the founder-facing counterpart to the DSCI summary: instead of restating the law, it turns it into an 8-step implementation roadmap for a small team, from writing a real notice to enabling deletion to logging breaches. It is honest that founders can be personally liable and that penalties run into hundreds of crores, but it also says the security safeguards need not be expensive for a small team, which is the practical read you want before you over-engineer. Open corridalegal.com →

Related terms

Also in Starting Up

See how founders actually handle this on Co-founders, team and legal, part of the Starting Up hub.

eChai Partner Brands