Shilpi Kulshrestha
Founder & Corporate Law Expert, BusinezExcellence
About
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy governance, and AI compliance. She is a Company Secretary and holds an LLB degree, and writes regularly on India's evolving data protection landscape.
Selected Publications
- •DPDPA 2023 Director Liability — Analysis of Board Responsibilities
- •Data Breach Response under DPDP Rules 2025 — 72-Hour Playbook
- •GDPR vs DPDPA — Consent Frameworks Compared
Speaking & Media
- •WSP-3.0 MOOC — Privacy Awareness Program
- •Corporate Law Workshops — DPDPA Readiness for Enterprises
Insights by Shilpi Kulshrestha(13)
DPDP Act 2023: Director Liability, Board Responsibilities and Data Privacy Compliance for Indian Companies
Can directors be personally liable under India's DPDP Act 2023? Explore board responsibilities, CEO accountability, compliance requirements and data breach management for Indian companies.
Data Breach Response & Notification Counsel under India's DPDP Act
The DPDP Rule 7 breach-notification timeline, what to tell affected individuals and the Data Protection Board, the 72-hour detailed report and how organisations should prepare.
GDPR Compliance: A Practical Guide for Indian Businesses Operating in the EU
Understanding GDPR requirements for Indian companies with EU operations. Key obligations, data transfer mechanisms, and compliance strategies for cross-border data flows.
Cross-Border Data Transfer: Mechanisms and Compliance under DPDP Act
Exploring cross-border data transfer mechanisms under India's DPDP Act. Understanding adequacy decisions, standard contractual clauses, and binding corporate rules.
Data Subject Rights: A Comprehensive Guide for Data Fiduciaries
Understanding the rights of data principals under the DPDP Act. Right to access, correction, erasure, data portability, and grievance redressal mechanisms.
DPDP Act Compliance: A Practical Guide for Businesses in India
How businesses can build DPDP Act 2023 compliance — notice, consent, security, breach response and governance — ahead of the DPDP Rules implementation.
Guides by Shilpi Kulshrestha(7)
DPDPA 2023 — Complete Guide
A practical, end-to-end guide to India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Covers applicability, Data Principals, Data Fiduciaries, consent and notice, legitimate uses, rights and duties, children’s data, Significant Data Fiduciaries, security safeguards, personal data breaches, retention and erasure, cross-border transfers, Consent Managers, the Data Protection Board, penalties, commencement timelines, and a practical compliance roadmap for organisations.
GDPR Essentials for Indian Companies
How EU data protection rules affect Indian businesses. Comprehensive guide to GDPR applicability, key principles, lawful bases, data subject rights, and compliance strategies for Indian IT and BPO companies.
CCPA / CPRA Overview
Comprehensive guide to the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). Covers scope, consumer rights, business obligations, enforcement, and compliance strategies for Indian companies serving US consumers.
GDPR vs DPDPA: A Comparative Analysis
Compare the EU General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act (DPDPA). Understand key differences in scope, consent, rights, obligations, and enforcement.
Case Studies(5)
Data Breach Incident in a Healthcare Company
Analysis of a data breach incident in a healthcare company and lessons learned for compliance.
Consent Management in E-Commerce Platform
Case study on implementing consent management in a large e-commerce platform.
Cross-Border Data Transfer Compliance
Case study on ensuring compliance for cross-border data transfers.
Data Protection Impact Assessment (DPIA) Implementation
Implementation of DPIA for high-risk data processing in a financial institution.
Data Subject Rights Handling
Case study on effectively handling data subject rights requests.
Need help with DPDPA compliance?
Our compliance experts can help you assess your DPDPA readiness, build a defensible compliance programme, and prepare for potential Board inquiries.