Writing on privacy, data protection, and information security
Sushil has written about privacy and information security in India since 2015. That work shapes how the DPDP practice runs today: hands-on, technical, and focused on how data actually moves.
Longstanding privacy concern
Public writing on privacy and data protection predates DPDP by years.
Security-by-design orientation
Articles on HTTPS, startup security, and basic information security emphasize operational controls.
Data minimization instinct
The recurring theme is to collect less data, protect it better, and explain its use clearly.
Selected publications
Nearly a decade of published analysis on data protection, privacy, and security — well before India had a data protection law.
Going Through US Border Security With Nothing to Hide
Aadhaar: the Indian biometric ID system has potential but presents many concerns
Time for Data Collectors to Say “No, Thanks!”
What India’s Data Protection Committee Can Learn from US, EU and China
Right to privacy: what US, EU, China can teach India about data protection
My words of advice for startups: build in data security and privacy from the start
India Inc Needs To Fix Its Numerous and Basic Information Security Flaws Quickly
Why this matters for DPDP readiness
DPDP is a legal framework, but readiness depends on operational choices: what data you collect, whether you need it, how you secure it, how you explain it, how you respond to people, and how your vendors handle it. That has been the through-line of this writing for nearly a decade.
That means not only identifying the requirement, but determining what systems, configurations, workflows or product changes are needed to satisfy it.