As India brings the Digital Personal Data Protection Act, 2025 into effect, organisations must strengthen their data governance, security controls, and compliance mechanisms to meet the evolving regulatory landscape. With phased enforcement beginning this year, the responsibilities and expectations for Data Fiduciaries, Significant Data Fiduciaries, and Consent Managers have increased substantially.
Key Highlights:
• Key obligations under the DPDPA and DPDP Rules, 2025
• The phased enforcement timelines organisations must prepare for
• Minimum security safeguards and breach-notification requirements
• Applicable exemptions and their implications for compliance strategies
Read our insights
Global Competition Review Recognises A&M in 2026 GCR 100
December 1, 2025
Global Competition Review has recognised A&M in the 2026 GCR 100 rankings. The GCR 100 highlights the world’s best competition practices by providing a quantitative and qualitative analysis of the law firms and economic consultancies doing the most important antitrust work globally.
Dubai Arbitration Week: Post Event Wrap-Up
November 24, 2025
A&M’s Disputes and Investigations practice proudly sponsored the 2025 Dubai Arbitration Week (DAW), held last week. As a key annual event in the arbitration calendar, DAW connects regional and global communities.
The Life Cycle of a Construction Dispute: An Expert Perspective
November 24, 2025
Managing Director Andrew Drennan outlines the key stages of a construction dispute and shows how experts can help parties diagnose issues early, navigate negotiation, arbitration, or litigation, and capture lessons learned for future projects.
Securities Enforcement DC 2025 – Key Takeaways
November 21, 2025
The Securities Docket recently hosted its Securities Enforcement conference in Washington, DC. Panels covered several topics around financial and investor risks and management, regulation updates, and emerging technology. Following are the key takeaways.
