Template
DPIA / PIA template
Screening questions, necessity and proportionality, risk register and sign-off, usable under GDPR, DPDPA and PDPPL.
Request access →Blog
I write about laws, technology and AI governance
Notes from practice — what regulators actually ask for, how DPIAs go wrong, and where AI governance meets the existing data privacy program. The reference sections live on www.privacyguide.in; AI governance is published here.
Sections
Four categories. Three open on www.privacyguide.in; AI Governance is published on this site.
Section
Data Privacy Laws
Global data privacy regulations and compliance requirements — the full texts of India's DPDPA, Qatar's PDPPL, Saudi Arabia's PDPL and the UAE's PDPL, chapter by chapter.
Open on privacyguide.in →Section
Data Privacy Management
Best practices for managing and protecting personal data in your organization — the management framework, day-to-day operating practice, and the tooling that supports it.
Open on privacyguide.in →Section
Data Protection Technology
Cutting-edge tools and technologies that enhance data security and data privacy protection — from encryption and anonymisation to zero-knowledge proofs.
Open on privacyguide.in →Section
AI Governance
The governance layer over AI systems — the EU AI Act, ISO/IEC 42001, NIST AI RMF, AI inventories, risk tiering, human oversight and AI impact assessment.
Browse the section →Artefacts
Working documents from live programs, generalised for reuse. Previews below — email me and I will send the current version.
Framework
ROPA framework
Article 30 record structure with data flow mapping, lawful basis, retention and transfer fields already wired together.
Request access →Framework
AI governance framework (ISO 42001)
AI inventory schema, model classification and risk tiering, human oversight criteria and EU AI Act obligation mapping.
Request access →Tool
Qatar PDPPL Privacy Assessment Tool
A structured self-assessment against Qatar's Personal Data Privacy Protection Law — obligations by role, control coverage and the gaps left to close.
Request access →Training
Data privacy training decks
Three tracks — executive, engineering and business — delivered organisation-wide, adaptable to your jurisdiction.
Request access →Writing
Published articles
Practitioner notes on data privacy operations and AI governance, published across the four sections above.
Read the articles →Case notes
Case studies (anonymised)
Longer write-ups of the three programs on the Contributions page, including control sets and regulator correspondence structure.
Request access →