A Practical Guide for Investigators, Compliance, Legal and Risk Professionals
India’s Digital Personal Data Protection (DPDP) Act is reshaping how organisations collect, process, store, and investigate personal data. For corporate investigators, compliance professionals, legal teams, auditors, and risk leaders, understanding these new obligations is essential.
Join ACi’s expert panel as we examine the practical impact of the DPDP Act and associated rules on internal investigations, regulatory inquiries, fraud investigations, whistleblower matters, and incident response.
What You’ll Learn
✅ How the DPDP framework affects investigations and evidence gathering
✅ Key exemptions available for the prevention, detection, and investigation of offences
✅ When personal data can be processed without explicit consent
✅ Data fiduciary responsibilities and organisational accountability
✅ Managing data breaches, notification requirements, and regulatory expectations
✅ Practical steps to minimise legal, compliance, and reputational risk
Why Attend?
The DPDP Act introduces significant obligations for organizations handling personal data, including stringent governance requirements, breach reporting obligations, and substantial financial penalties for non-compliance.
This webinar will provide practical guidance and real-world insights to help investigators and compliance professionals confidently navigate the evolving regulatory landscape while maintaining effective investigative practices.
Expert Panel Discussion
Hear from leading practitioners from investigations, legal, compliance, and privacy disciplines as they discuss:
- Foundations Definitions of Data Principal (subject) vs. Data Fiduciary (employer) vs. Data Processor (forensic partner).
- Investigative: Exemptions Deep dive into Section 17: Processing for enforcing legal rights and investigating offences.
- Operational Impact: The 12–18 month implementation timeline and “digital-by-design” adjudication.
- Technical: Safeguards Mandatory 1-year log retention and 72-hour notification protocols.
- Risk & Liability Non-delegable duties of fiduciaries and the role of the Data Protection Board (DPBI).
Who Should Attend?
- Board and Audit Committee Members
- Corporate Investigators
- Compliance Officers
- Internal Auditors
- Legal and Privacy Professionals
- Fraud and Forensic Specialists
- Risk and Governance Professionals
- Law Enforcement and Regulatory Personnel
Date: 21 October 2026
Time: 1:00 PM to 2:00 PM (India Standard Time)
Join ACi for this timely discussion and gain the practical knowledge needed to conduct effective investigations while meeting India’s evolving data protection requirements.
Panel
Saguna Sodhi is a Partner with EY Forensic & Integrity Services in India. She is also part of the leadership team of the India Chapter of Women’s White Collar Defense Association.
Saguna is a qualified Chartered Accountant and has over 20 years of professional experience with cross functional expertise across industries and specializes in Ethics and Compliance Programs, Corporate Governance, fraud investigations and Integrity risk management. She has led several investigations including fraudulent diversion of funds, misrepresentation by management and business units and allegations of bribery and corruption. She specializes in the area of risk and compliance including FCPA across different sectors as it relates to investigation, due diligence and trainings. She has also advised clients on policy and process level controls to manage fraud and corruption risks and recommended controls to be implemented for mitigating the possible monetary and reputation impact on companies.
Rupinder Malik is a Senior Partner at JSA Advocates & Solicitors, specializing in white collar crime investigations, regulatory enforcement, corporate law, and mergers & acquisitions. In her whitecollar practice, she advises multinational and Indian clients on complex internal investigations, antibribery and anti-corruption compliance, crisis response, and cross-border enforcement matters. Her experience covers regulatory and internal investigations, corporate fraud, financial misconduct, moneylaundering, data privacy incidents, and the development of risk-based compliance frameworks. She also
advises clients on data protection and privacy matters, including developing compliance roadmaps and
practical frameworks to address evolving data protection and privacy obligations under Indian law. Recognized for her strategic insight and practical execution, Rupinder helps organizations navigate high-stakes regulatory and reputational challenges with clarity and confidence. She is also the India. Chapter Leader of the Women’s White Collar Defense Association and the Chair of the IBA Talent and
Leadership Subcommittee
Amit Aman is a senior Risk, Compliance & Investigations leader with over 15 years of experience leading anti-corruption, whistleblower, fraud, and enterprise risk programs across APAC. He currently heads the Risk, Compliance & Audit function for Kmart Group’s sourcing and GCC operations in Asia and oversees governance and investigations across eight countries and has built enterprise-wide anti-bribery and whistleblower frameworks from the ground up.
Shanu Saksena is Head of ACi India. She is an experienced ethics, compliance, governance, and corporate secretarial leader with over 30 years of expertise in driving responsible business practices, regulatory compliance, mergers and acquisitions, and sustainability initiatives, with a strong background in managing listed companies, regulatory audits, policy compliance, third-party management, and corporate governance across multiple countries and industries.






















