Working notes
What we learn doing this work: what to measure, what to stop paying for, what the rules require and how teams change around the tools. Claims about law point at primary text and carry the date we checked them. None of it is legal advice.
DPDPOne customer record, seven places the DPDP Act reaches it
No regulator can fine you under the DPDP Act today, and its main duties start on 13 May 2027. Follow one customer record through your company and you find where the Act reaches it: the form, the vendors, the AI tools, the backups and the breach.
15 October 2026 · Dhiraj Khanna
EU AI ActThe four documents missing from almost every Article 10 file
Article 10 of the EU AI Act produces four documents somebody outside your company will read: data provenance, a bias examination, a mitigation record and a written gap analysis. Most providers have none of the four, and the Digital Omnibus did not remove the duty behind them.
14 September 2026 · Dhiraj Khanna
Get a straight answer about your own situation
Articles generalise. Your business does not. Tell us what you run and we will tell you where you stand.