What the DPDP Act Means for Startups and Businesses
What India's data protection law asks of a business, and by when.
India's Digital Personal Data Protection Act changes what a business has to do with the personal data it collects, and most startups collect more of it than they think: sign-ups, phone numbers, customer lists, payment details, employee records, the leads sitting in a CRM.
The Act was passed in 2023 and its Rules were notified in November 2025, with most of what they ask of a business coming into force eighteen months later, in May 2027.
This session is about what the law actually asks for, in plain terms. What counts as personal data, and when your company is the one responsible for it. What a valid notice and consent look like, and when data can be processed without consent. What changes for products used by children. What you have to do when there is a breach, and who you have to tell. What it means for the vendors and tools that handle data on your behalf, and what it costs to get it wrong.
The format is open and primarily driven by audience questions, so bring the product, the data flow or the contract you are unsure about. It is for anyone in Ahmedabad running a business that handles customer data, and for the people who build its product.
It runs on Friday, 30 October at House of Starts on Sindhu Bhavan Road in Ahmedabad, from 7 pm to 8:30 pm, and is open to all.
Speakers: Amish Trivedi (CEO, Workplate) and Rushabh Shah (Managing Partner, STIR Advisors). Hosted by Apoorva Bhayani (Vice President, House of Starts) and Jatin Chaudhary (CEO, eChai Ventures).
Venue: House of Starts, First Floor, Block D, Satyam Corporate Square, Sindhu Bhavan Road, Bodakdev, Ahmedabad, Gujarat 380059
More details: https://echai.ventures/events/what-the-dpdp-act-means-for-startups-and-businesses-oct-30-2026