Connect on WhatsApp

Knowledge Repository

Insights & Strategy

Authoritative legal intelligence navigating complex Indian regulatory frameworks, cross-border corporate law, and commercial dispute resolution.

M&A and JV Advisory

DPDP Data Principal Rights: How Indian Businesses Must Handle Access, Correction, Erasure and Grievance Requests Before May 2027

By Hitarth Shekhar|Published: Oct 10, 2026

Sections 11 to 14 of the DPDP Act give every customer, employee and user enforceable rights of access, correction, erasure, grievance redressal and nomination, and Rule 14 of the DPDP Rules, 2025 requires businesses to publish a working rights-request mechanism on their website or app, with a grievance response period capped at 90 days. A privacy-policy paragraph is not a rights-management system. This analysis maps the rights precisely, including the consent-scoping of Sections 11 and 12 that most commentary misses, and sets out the operational request workflow Indian businesses need before 13 May 2027.

Read Briefing
India-EU: FTA & CBAM

India-EFTA TEPA Investment Guide 2026: How Swiss, Norwegian and EFTA Companies Can Structure Investments in India

By Akash Sinha|Published: Oct 10, 2026

The India-EFTA Trade and Economic Partnership Agreement completed its first year in force on 1 October 2026, marked by a Swiss state visit and the 2nd India-EFTA Prosperity Summit in New Delhi under the theme of building a US$100 billion investment partnership. For Swiss, Norwegian, Icelandic and Liechtenstein companies, the commercially important question is no longer what TEPA promises but how to structure an actual Indian investment: TEPA does not replace India's FEMA and FDI entry regime, and the route from treaty opportunity to operating business still runs through sectoral caps, entity choice, IP structuring, factory approvals and RBI reporting. This guide maps that route.

Read Briefing
Technology, Media & Privacy (GDPR)

DPDP Cross-Border Data Transfers: Can Indian Businesses Store Customer Data Outside India After May 2027?

By Shubham Saket|Published: Oct 10, 2026

The DPDP Act does not force Indian personal data to stay in India, but overseas storage is not automatically lawful either. Section 16 gives the Central Government a restricted-destination power rather than a GDPR-style adequacy regime, Rule 15 of the DPDP Rules, 2025 adds a separate foreign-State-access mechanism that commentators routinely misdescribe as the restricted-country list, Section 16(2) preserves stricter sectoral localisation laws, and Rule 13(4) can eventually impose localisation on specified data of Significant Data Fiduciaries. This analysis separates the four questions, corrects the three big misconceptions, and sets out the cross-border data map businesses need before 13 May 2027.

Read Briefing
Technology, Media & Privacy (GDPR)

Significant Data Fiduciaries Under the DPDP Act: DPOs, Annual DPIAs, Algorithm Audits and Data Localisation Before May 2027

By Shubham Saket|Published: Oct 10, 2026

No company in India is a Significant Data Fiduciary today, because Section 10 of the DPDP Act makes designation notification-based rather than threshold-based. Yet when designations arrive, Rule 13 of the DPDP Rules, 2025 will impose the most demanding layer of the entire framework: an India-based Data Protection Officer answerable to the board, an independent data auditor, an annual DPIA and audit cycle with significant observations reported to the Data Protection Board, due diligence over algorithmic software, and potential localisation of specified personal and traffic data. This analysis separates the statute from the speculation and sets out the readiness file data-intensive businesses should build before 13 May 2027.

Read Briefing
International & Cross-Border Law

Australia-India ECTA in 2026: Zero-Duty Tariffs, Rules of Origin and Customs Compliance for Indian Exporters

By Shubham Saket|Published: Oct 10, 2026

Australia completed its five-year B5 tariff staging under the Australia-India Economic Cooperation and Trade Agreement on 1 January 2026, and Australian Government guidance now records that 100 per cent of imports from India can enter Australia duty free. But a zero tariff rate is not an automatic entitlement: every preferential claim must be supported by proof that the goods are Indian originating under ECTA's Chapter 4 rules and its product-specific origin criteria. This analysis sets out the compliance methodology Indian exporters and Australian importers need, from HS classification and product-specific rules through Certificate of Origin issuance on India's Trade Connect platform to verification risk and contract allocation when Australian Border Force questions a claim.

Read Briefing
Technology, Media & Privacy (GDPR)

DPDP Data Breach Reporting vs CERT-In: The 6-Hour and 72-Hour Incident Response Rules Indian Businesses Must Reconcile Before May 2027

By Hitarth Shekhar|Published: Oct 10, 2026

A personal data breach in India can start two legal clocks at once: CERT-In's existing six-hour cyber incident reporting direction and the DPDP Rules' forthcoming architecture of immediate intimation to affected individuals and the Data Protection Board, with a detailed report within 72 hours. These are separate obligations to separate recipients. This analysis maps both regimes, explains why one notification does not satisfy the other, and sets out the unified incident-response workflow businesses need before 13 May 2027.

Read Briefing
India-UK: SME Mobility

India-UK CETA vs DCTS: Which Tariff Preference Should Indian Exporters Use During the 2026-2028 Transition?

By Akash Sinha|Published: Oct 10, 2026

The UK-India CETA entered into force on 15 July 2026, but India remains inside the UK's Developing Countries Trading Scheme until 15 July 2028. During the transition, exporters may claim either regime, yet the two systems carry different origin rules, different proofs and, after the UK's goods-graduation notice, different product coverage. This analysis sets out the preference-selection methodology Indian exporters should apply shipment by shipment before India graduates from the DCTS.

Read Briefing
Technology, Media & Privacy (GDPR)

DPDP Data Retention Rules: How Long Can Indian Businesses Keep Customer Data Before May 2027?

By Hitarth Shekhar|Published: Sep 26, 2026

The DPDP Rules do not give every Indian business a universal three-year retention period. Section 8(7) of the Act ties erasure to the end of the specified purpose, Rule 8 and the Third Schedule create a fixed three-year inactivity mechanism only for defined large-platform classes, and Rule 8(3) imposes a one-year minimum retention floor for processing logs. This analysis explains how the three layers interact, which other statutes override them, and how to build a defensible retention matrix before 13 May 2027.

Read Briefing
Technology, Media & Privacy (GDPR)

DPDP Children's Data Rules: How Indian Apps, EdTech and Online Businesses Must Build Age Verification and Parental Consent Before May 2027

By Shubham Saket|Published: Sep 25, 2026

The DPDP Act treats every user below eighteen as a child, and Rules 10 to 12 of the DPDP Rules, 2025 prescribe how verifiable parental consent, age assurance and the Fourth Schedule exemptions actually work. These obligations commence on 13 May 2027. This analysis separates age declaration, age assurance and parental verification, explains Rule 10's evidentiary routes without over-collection, maps the Fourth Schedule exemptions, and sets out the product-remediation checklist for apps, EdTech, gaming and online platforms.

Read Briefing
India-ASEAN & Indo-SEA Desk

ASEAN-India Trade Agreement Review 2026: What the AITIGA Upgrade Could Change for Indian Exporters

By Parth Raman|Published: Sep 24, 2026

On 22 September 2026 in Manila, ASEAN Economic Ministers and India reviewed progress on the AITIGA upgrade and again called for a timely conclusion. The review is being negotiated across eight Sub-Committees covering market access, Rules of Origin, customs procedures, standards and trade remedies. This guide explains what the current agreement already does for Indian exporters, what the review is likely to change, and the pre-review audit every India-ASEAN supply chain should complete now.

Read Briefing
Technology, Media & Privacy (GDPR)

DPDP Consent Managers Go Live in November 2026: What Indian Businesses Need to Know Before the Next Compliance Phase

By Akash Sinha|Published: Sep 22, 2026

On 13 November 2026, Rule 4 of the DPDP Rules activates India's Consent Manager registration regime, the first tranche of the substantive compliance calendar. Most Indian businesses do not need to register as Consent Managers, but every Data Fiduciary now has only six months before the wider DPDP architecture follows in May 2027. This guide separates the statutory Consent Manager from ordinary consent tools, maps who must register, and lays out the readiness roadmap for the November 2026 to May 2027 window.

Read Briefing
India-EU: FTA & CBAM

EU CBAM Verification Is Now an Indian Factory-Level Obligation: Five Steps Exporters Must Complete Before Their 2026 Data Is Locked

By Parth Raman|Published: Sep 20, 2026

he European Commission has closed out its definitive-period CBAM implementation package: corrected default values under Implementing Regulation (EU) 2026/1740 applying retrospectively from 1 January 2026, ten new guides for non-EU operators, and the first comprehensive verification and accreditation guidance. For Indian producers of steel, aluminium, cement, fertilisers, hydrogen and electricity, CBAM compliance is no longer an EU importer's paperwork problem; it is a factory-level obligation involving monitoring plans, EU-accredited verifiers, physical site visits and rewritten supply contracts. This guide maps the five steps exporters must complete before their 2026 emissions data is locked in.

Read Briefing
Technology, Media & Privacy (GDPR)

Data Privacy Compliance in India: The DPDP Act Framework

By Ravi Gaurava|Published: Aug 24, 2026

India's Digital Personal Data Protection Act, 2023 stopped being a statute on paper on November 13, 2025, when the DPDP Rules activated the Data Protection Board and started a three-phase enforcement clock that ends on May 13, 2027. This guide explains the complete framework: who qualifies as a Data Fiduciary, what valid consent and legitimate use actually require, the obligations that apply to every business and the enhanced tier for Significant Data Fiduciaries, the 72-hour breach rule, cross-border transfer mechanics, the penalty schedule, and the compliance roadmap your business should be running right now.

Read Briefing
M&A and JV Advisory

Factory Licensing for Foreign Manufacturers in India

By Shubham Saket|Published: Aug 24, 2026

India permits 100% FDI under the automatic route in most manufacturing sectors, but the license stack between incorporation and commercial production runs through pollution control boards, state factory directorates, fire services, municipal bodies, and sector regulators, in a sequence that punishes improvisation. This guide maps every approval a foreign manufacturer needs, the order in which to obtain them, realistic timelines, the FEMA and trade compliance layer, and the sequencing mistakes that cost foreign plants six to twelve months.

Read Briefing
Corporate

Corporate Legal Retainership Plans: Ongoing Counsel for Businesses

By Shubham Saket|Published: Aug 24, 2026

Most Indian businesses still buy legal help the way they buy fire extinguishers, after the smoke appears. A corporate legal retainership reverses that logic, giving your company a dedicated external legal team that knows your contracts, your cap table, and your compliance calendar, for a fixed and predictable fee. This guide explains what a retainership actually covers, how the models differ, what the agreement itself must contain, and how to tell whether your business has reached the point where one pays for itself.

Read Briefing
International & Cross-Border Law

FEMA & Forex Compliance Guide for Foreign Companies in India

By Parth Raman|Published: Aug 24, 2026

Every rupee of foreign capital that enters or leaves an Indian entity travels through the Foreign Exchange Management Act, 1999, and the RBI's reporting machinery. Miss a 30-day FC-GPR filing, price a share transfer incorrectly, or let an export receivable age past nine months, and you have a FEMA contravention that surfaces at the worst possible moment: during an exit, a fundraise, or a repatriation. This guide maps the full compliance lifecycle for foreign companies in India, from entry structure and capital inflows to annual filings, intercompany payments, penalties, and compounding

Read Briefing
Corporate & Commercial Law

The Hidden Liability in Your Tech Stack: Why Your SaaS Vendors Expose You Under the DPDP Act

By Ravi Gaurava|Published: Aug 24, 2026

Your CRM, your hosting provider, and your analytics tool all process personal data on your behalf, but under the DPDP Act their failures become your penalties. This article explains the Data Fiduciary and Data Processor distinction, why standard SaaS terms fail the 72-hour breach notification test, the exact clauses every vendor contract must now include, and how to audit your tech stack before May 13, 2027.

Read Briefing
Technology, Media & Privacy (GDPR)

What Indian Websites Get Wrong About DPDP

By Akash Sinha|Published: Aug 20, 2026

Most Indian websites collect personal data every day without realizing the DPDP Act already applies to them. From contact forms to cookies to chatbots, the scope is far broader than most owners understand. Here is what the law actually says, what it means for your website, and what you need to do before May 2027.

Read Briefing
Corporate & Commercial Law

FDI in Indian Tech & Manufacturing: Key FEMA & RBI Compliance Hurdles to Avoid

By Ravi Gaurava|Published: Aug 13, 2026

A practitioner-level analysis of the FEMA and RBI compliance lifecycle governing foreign direct investment into Indian technology and manufacturing, calibrated to Press Note 2 of 2026 and the pending Foreign Investment Rules.

Read Briefing
Corporate & Commercial Law

Unlocking Startup Bihar 2026: Navigating State Incentives, Zero Patent Costs, and Entity Structuring

By Pankaj Kumar|Published: Jun 22, 2026

The Startup Bihar Initiative offers interest-free seed grants up to Rs. 11.5 lakhs, zero patent filing costs, and a 5-year regulatory holiday. This guide breaks down the macro policy pulse, high-potential sectors, legal trap points every founder must avoid, and how VCL structures businesses for scale from Day 1.

Read Briefing
Corporate & Commercial Law

How Foreign Startups and SMEs Can Legally Enter India: A Complete 2026 Guide

By Akash Sinha|Published: Jun 18, 2026

Foreign startups and SMEs entering India in 2026 must choose between a Wholly Owned Subsidiary, Branch Office, Liaison Office, or LLP. This guide compares all four structures across FEMA compliance, tax, liability, and operational flexibility, with updated rules for the RBI's 2025 draft framework.

Read Briefing
India-African Union Desk

Unlocking the AfCFTA: Structuring Cross-Border Trade Under a Unified African Tariff Framework

By Hitarth Shekhar|Published: Jun 9, 2026

The African Continental Free Trade Area is no longer a roadmap document. With 49 ratifications, a completed Guided Trade Initiative, and an operational payment settlement system, AfCFTA is live. This article examines how Indian enterprises must legally structure their cross-border trade to operate within it.

Read Briefing
International & Cross-Border Law

Parametric Risk Engineering in International Trade Law: Index-Based Contractual Architecture for Maritime Chokepoints and Sovereign Health Disruptions

By Shubham Saket|Published: Jun 2, 2026

A practitioner-level analysis of how index-based parametric insurance can be codified into international trade agreements to address maritime chokepoint disruptions and sovereign public health emergencies, with specific reference to the India-UAE CEPA, AfCFTA, and emerging India-EU frameworks.

Read Briefing
India-African Union Desk

Navigating the IAFS-IV Postponement: Sovereign Public Health Law and Contractual Resilience for Indian Enterprises in Africa

By Akash Sinha|Published: May 28, 2026

The May 2026 postponement of the Fourth India-Africa Forum Summit due to the Ebola outbreak reveals critical gaps in how Indian enterprises handle cross-border public health disruptions. This analysis examines force majeure clauses, material adverse change triggers, Africa CDC compliance, and pharmaceutical technology transfer frameworks in the context of sovereign health emergencies.

Read Briefing
India-African Union Desk

The Global South Consensus: From G20 Inclusion to Permanent Institutional Alignment

By Parth Raman|Published: May 25, 2026

India's championing of the African Union's permanent G20 seat in 2023 marked a structural turning point for South-South economic law. This analysis examines how that diplomatic act reshapes cross-border investment architecture, sovereign risk frameworks, and legal strategy for Indian enterprises across the African continent. This article is authored by Parth Raman, Principal Counsel, International Affairs at Vera Causa Legal, and is the first in an ongoing series examining the evolving legal architecture of India-Africa relations.

Read Briefing
Technology, Media & Privacy (GDPR)

GDPR Compliance for SMEs in Europe: Key Legal Requirements Businesses Must Know in 2026

By Hitarth Shekhar|Published: May 22, 2026

A comprehensive legal guide to GDPR obligations for small and medium-sized enterprises operating in Europe. Covering lawful bases for processing, data subject rights, DPO requirements, the 72-hour breach notification rule, and administrative fines under Regulation (EU) 2016/679, with direct references to the relevant Articles.

Read Briefing
India-EU: FTA & CBAM

India-Nordic Green Technology & Innovation Strategic Partnership: What It Means for Indian and European SMEs in 2026

By Akash Sinha|Published: May 21, 2026

"The 3rd India-Nordic Summit (Oslo, 19 May 2026) has upgraded bilateral relations to a 'Trusted Green Technology and Innovation Strategic Partnership.' This article analyzes the legal implications of this shift, the interplay between the new India-EFTA TEPA and the India-EU FTA, and provides a compliance roadmap for SMEs navigating cross-border R&D, IP licensing, and ESG/CBAM reporting requirements."

Read Briefing
India-UAE: CEPA 2026

India-UAE CEPA 2026: The Complete Legal & Compliance Guide for Indian Exporters

By Akash Sinha|Published: May 14, 2026

Authored by Akash Sinha at Vera Causa Legal, this definitive India-UAE CEPA legal guide for 2026 walks Indian exporters through the full compliance lifecycle, right from Rules of Origin and the 40% value addition test to Certificate of Origin procurement, Dubai customs procedures, digital trade obligations under the ICEGATE–Dubai Trade integration, and CEPA dispute resolution pathways. Whether you are an SME exporter entering the UAE market for the first time or a compliance officer conducting an annual legal audit, this guide delivers the authoritative, practitioner-level insight you need to protect your preferential tariff benefits and avoid costly post-clearance recovery proceedings.

Read Briefing
Intellectual Property (Global)

India–New Zealand FTA 2026: A Complete Legal Analysis for Indian & Kiwi Businesses

By Akash Sinha|Published: Apr 29, 2026

With the India–New Zealand FTA officially inked, a new era of economic partnership begins. This definitive guide by Vera Causa Legal examines the "People-to-People" mobility chapter, the fast-track pharmaceutical pathways, and the essential safeguards protecting India’s sensitive agricultural sectors. Discover what this means for your market entry strategy.

Read Briefing
India-EU: FTA & CBAM

The New Era of India-EU Trade: Navigating the 2026 FTA Framework and the Emerging Investment Landscape

By Ravi Gaurava|Published: Apr 28, 2026

The "mother of all trade deals" is here, but is your supply chain ready? Explore our deep dive into the 2026 India-EU FTA framework, covering the IT services windfall, the Rules of Origin (RoO) audit requirements, and why the new EU carbon (CBAM) and deforestation (EUDR) regulations may negate your tariff gains if not addressed immediately.

Read Briefing
India-UAE: CEPA 2026

India-UAE CEPA 2026: Zero-Duty Export & Digital CoO Guide for SMEs

By Shubham Saket|Published: Apr 24, 2026

India-UAE bilateral trade crossed USD 100 billion in FY 2024-25, yet most NCR-based SMEs are still leaving CEPA's zero-duty concessions on the table, not from ignorance of the tariff schedule, but from procedural gaps in their Certificate of Origin workflow. Two April 2026 regulatory changes; one from DGFT in New Delhi, one from the UAE Ministry of Finance, have reset the compliance baseline for every Indian exporter shipping into the UAE.

Read Briefing
India-UK: SME Mobility

India–UK FTA Service Supplier Visas: What the February 2026 Double Contribution Convention Actually Changes for Indian IT Boutiques

By Akash Sinha|Published: Apr 20, 2026

India and the UK have activated a dedicated Service Supplier visa route and, separately, signed a Double Contribution Convention on 10 February 2026 that extends the social security exemption for Indian detached workers from 52 weeks to 36 months. For NCR-based tech boutiques supplying UK clients on project contracts, these two instruments together rewrite the cost and compliance arithmetic of a UK deployment.

Read Briefing
Corporate

A Comprehensive Guide to Mutual Consent Divorce

By Hitarth Shekhar|Published: Apr 14, 2026

Mutual Consent Divorce offers a streamlined and dignified legal path to dissolve a marriage under Section 13B of the Hindu Marriage Act, 1955. This comprehensive guide navigates through the essential legal frameworks, the mandatory cooling-off period, and the requirements for alimony and custody settlements. Discover how couples can transition into a new chapter of life with legal clarity, efficiency, and mutual respect.

Read Briefing