Author: Priya Sharma

Compliance Lead · Data Loss Prevention practice, Sirius Star Enterprise TechnologiesPriya leads Sirius Star's compliance practice, advising Indian MSMEs and mid-market firms on DPDP readiness, breach-response playbooks, vendor DPIAs, and audit evidence packs. Before Sirius Star she spent seven years inside the privacy programs of two BFSI groups — one listed bank, one NBFC — where she built the DSR intake pipeline and represented the organization in two RBI cyber-security audits.Her writing focuses on what "reasonable security safeguards" actually mean on a finite budget — the line between what the law demands and what auditors will accept.Credentials: DCPLA (Data Certified Privacy Lead Auditor) · speaker at industry forums on DPDP rules · 7 years in BFSI privacy programs · 2 regulatory cyber-security audits represented.Specialist areas: DPDP Act readiness · DPIA authoring · DSR intake pipelines · breach response · vendor DPA reviews · audit evidence packs.Reach Priya: info@siriusstar.in ·

Compliance
DPDP compliance checklist: 10 things to fix before May 2027
ByPriya Sharma 16/05/202618/06/2026
A DPDP compliance checklist for an Indian mid-size company comes down to ten controls: appoint a DPO, classify your personal data, rewrite your consent flows, build a 72-hour breach drill, audit every vendor that touches user data, fix data retention, set up a deletion request workflow, lock down endpoint exit routes, document everything, and run…
Read More DPDP compliance checklist: 10 things to fix before May 2027
Data Protection
“Our data isn’t that sensitive.” Here is what personal data under DPDP actually means.
ByPriya Sharma 10/05/202618/06/2026
Personal data under DPDP is anything that can identify a living person, and that includes the spreadsheet of employee phone numbers your HR head emails to herself every Friday. The Digital Personal Data Protection Act 2023 has no “sensitive” tier the way GDPR does. There is one category called personal data, and the law applies…
Read More “Our data isn’t that sensitive.” Here is what personal data under DPDP actually means.
Data Protection
Data breach cost India: what a mid-size firm actually pays
ByPriya Sharma 05/05/202618/06/2026
Data breach cost India for a mid-size firm runs approx Rs.14 to 27 crore in fines, breach response, and lost client trust.
Read More Data breach cost India: what a mid-size firm actually pays
Data Protection | Compliance
Critical DPDP Act penalties India: what ₹250 crore really means for mid-size companies
ByPriya Sharma 14/04/202618/06/2026
By Priya Sharma, Compliance Lead, Data Loss Prevention practice · Last updated 19 April 2026 DPDP Act penalties India, ₹250 crore per violation under the 2027 enforcement regime. DPDP Act penalties India can reach ₹250 crore per violation, plus mandatory 72-hour breach notification. Most mid-size companies haven’t started compliance, but you have until May 13,…
Read More Critical DPDP Act penalties India: what ₹250 crore really means for mid-size companies
Data Protection
How employees steal company data: 5 methods most Indian companies cannot detect
ByPriya Sharma 10/03/202618/06/2026
Last updated: April 2026 | By Priya Sharma, Compliance Lead, Sirius Star | 8-minute read Table of contents The 30-second version Why employees steal and why you do not catch them Method 1: email forwarding Method 2: USB and external drives Method 3: personal cloud uploads Method 4: WhatsApp and messaging apps Method 5: the…
Read More How employees steal company data: 5 methods most Indian companies cannot detect
Data Protection
DLP for small business in India: the starter guide nobody writes for companies under 200 people
ByPriya Sharma 22/02/202618/06/2026
Data loss prevention is not just for enterprises. A plain-language DLP guide for Indian small businesses covering costs, setup steps, and DPDP compliance on a real budget.
Read More DLP for small business in India: the starter guide nobody writes for companies under 200 people
Data Protection | Compliance
The critical DPDP Act 2023 compliance guide every Indian MSME needs before May 2027
ByPriya Sharma 18/02/202618/06/2026
Plain-English DPDP Act 2023 guide for Indian MSMEs. 7-step compliance roadmap, penalty ceilings (up to ₹250 crore), consent fixes, DPO guidance — before May 2027.
Read More The critical DPDP Act 2023 compliance guide every Indian MSME needs before May 2027

Author: Priya Sharma

DPDP compliance checklist: 10 things to fix before May 2027

“Our data isn’t that sensitive.” Here is what personal data under DPDP actually means.

Data breach cost India: what a mid-size firm actually pays

Critical DPDP Act penalties India: what ₹250 crore really means for mid-size companies

How employees steal company data: 5 methods most Indian companies cannot detect

DLP for small business in India: the starter guide nobody writes for companies under 200 people

The critical DPDP Act 2023 compliance guide every Indian MSME needs before May 2027

Solutions

Products

Company