SS
Adv. Sanket Shah
LL.M. in Data Privacy · AI & Tech Law · Advocate
I am a data protection lawyer and legal technologist based in Indore, India, with a postgraduate specialisation in data privacy law. My practice sits at the intersection of law, technology, and automation: I work with organisations to navigate complex multi-jurisdictional data protection obligations, design privacy-first compliance programmes, and build legal automation systems that make legal work faster and more accurate.
This Tool
Privacipher
A free, browser-based multi-framework compliance assessment tool covering 9 global privacy laws. No login. No server. All processing happens in your browser. Built to give practitioners, in-house counsel, and businesses a substantive starting point for multi-jurisdictional compliance analysis.
9 Frameworks
Sector-Specific Scoring
Penalty Exposure Mapping
Risk Heat Map
30/60/90-Day Roadmap
Live Breach Playbook
Framework Comparison Matrix
Enforcement Calendar
PDF Export
Zero Data Collection
What I Do
Practice Areas
Data Protection & Privacy Law
Multi-jurisdictional compliance programmes across DPDPA, GDPR, CCPA/CPRA, Saudi PDPL, LGPD, Singapore PDPA, Thailand PDPA, UK GDPR, and UAE PDPL. Gap assessments, privacy notices, data processing agreements, breach response.
AI Governance & AI Law
AI governance frameworks aligned with the EU AI Act, emerging Indian AI policy, and DPDPA obligations for algorithmic processing. Responsible AI deployment, DPIA for AI systems, and ADMT compliance under CCPA CPPA regulations.
Contract Lifecycle Management
End-to-end CLM design and implementation: contract templates, automated drafting workflows, clause libraries, obligation tracking, and renewal management. Specialist experience with technology, SaaS, and data-related agreements.
Legal Automation
Building legal workflows that reduce manual effort: automated document assembly, contract review checklists, compliance trackers, and legal technology tools. Combining legal expertise with practical automation to improve legal operations.
Tech Law & IT Agreements
Technology contracts, software licensing, SaaS agreements, API terms, vendor agreements, data processor agreements (DPAs), and technology procurement. Practical advice on IP ownership, liability, and data rights in technology transactions.
Compliance Audits & Gap Analysis
Structured compliance assessments against DPDPA, GDPR, and other frameworks. Gap analysis reports, remediation roadmaps, and board-ready compliance summaries. Sector-specific assessments for HealthTech, FinTech, EdTech, and SaaS.
Depth of Knowledge
Specialist Expertise
DPDPA 2023 & DPDP Rules 2025
Granular command of all provisions, phased commencement structure, penalty schedule, SDF obligations, and the s.7 legitimate uses framework. Tracking Rules development and DPAB guidance from formation.
GDPR & UK GDPR / DUAA 2025
Practical GDPR compliance including ROPA, DPIAs, SCCs, Transfer Impact Assessments, and cross-border transfer structures. DUAA 2025 changes including Recognised LI, SAR stop-the-clock, and modified ADM framework.
Multi-Jurisdictional Divergence Analysis
Identifying where frameworks conflict or require separate compliance tracks — including DPDPA vs GDPR on legitimate interests, children's data age thresholds, breach notification scope, and cross-border transfer models.
Data Processing Agreements
Drafting and reviewing DPAs under DPDPA s.8(2), GDPR Art. 28, LGPD Art. 37, Thailand PDPA Sec. 40, and analogous provisions. Aligning processor contracts to multi-framework obligations.
Breach Response & Incident Management
Advising on multi-framework breach notification obligations across 8 jurisdictions with different authority timelines, individual notification thresholds, and regulator temperaments.
Engagements I Take On
How I Can Help
Assessment
DPDPA / Multi-Framework Gap Assessment
Structured review of your current practices against applicable frameworks, with a prioritised remediation report and board-ready summary.
Documentation
Privacy Policy, DPA & CLM Templates
Drafting jurisdiction-specific privacy notices, data processing agreements, vendor contracts, and CLM playbook documentation.
Incident Response
Breach Response Advisory
Advising on multi-jurisdiction breach notification obligations, authority communication, individual notification strategy, and post-incident documentation.
Automation
Legal Workflow Automation
Designing and building legal automation tools, contract assembly systems, and compliance trackers for legal teams and in-house counsel.
Training
Data Protection Training
Practical workshops and training sessions on DPDPA, GDPR fundamentals, data principal rights, and incident response for legal and non-legal teams.
Advisory
Ongoing Legal Advisory Retainer
Retained advisory support for in-house teams requiring access to data protection and tech law expertise on an ongoing basis.
Coverage
Frameworks I Work With
🇮🇳
DPDPA 2023
India · DPDP Rules 2025
🇪🇺
GDPR
EU / EEA · 2016/679
🇺🇸
CCPA / CPRA
California · CPPA Regs 2025
🇸🇦
Saudi PDPL
Saudi Arabia · SDAIA
🇧🇷
Brazil LGPD
Brazil · ANPD
🇸🇬
Singapore PDPA
Singapore · PDPC
🇹🇭
Thailand PDPA
Thailand · B.E. 2562
🇬🇧
UK GDPR / DUAA 2025
United Kingdom · ICO
🇦🇪
UAE PDPL
UAE · UAEDO
Let's Work Together
If you need legal advice on data protection compliance, AI governance, contract lifecycle management, or legal automation, I'd be glad to hear from you. Reach out on LinkedIn or explore all contact options via my portfolio.
⚠ Disclaimer
Privacipher and all content on this site are for informational purposes only and do not constitute legal advice. Use of this tool does not create an advocate-client relationship. For professional legal advice tailored to your specific circumstances, please contact Adv. Sanket Shah directly. · Full Terms of Use