Release announcements for DPDP Privacy Monitor and Netgraph SIEM, regulatory updates, practitioner writing, and media coverage from the AutoCops team. Subscribe below to get the latest in your inbox.
Latest news
Netgraph, our graph-native NextGen SIEM, is now live on autocops.org. 23 security modules, SIEM, EDR, NDR, UEBA, SOAR, CNAPP, DSPM, CTEM, BAS and more, unified on a single security knowledge graph, with an eight-agent AI SOC (human-in-the-loop), MTTD ≤ 60s, MTTR ≤ 15 min, at ≤ 15% of Splunk/QRadar ingest cost. Exclusively Made in India, DPDP/CERT-In first-class, air-gap ready.
Version 2.2.0 of DPDP Privacy Monitor ships with centralized Application Logs, the new Data Risk Flow visualisation, an expanded DSPM suite, platform settings, and full internationalisation across the 22 scheduled Indian languages, alongside the twelve capability modules covering the complete DPDP Act 2023 control framework.
AutoCops opens up its renewed public marketing site at autocops.org with the full DPDP Act 2023 compliance platform. New renewed site includes a free assessment, glossary, services catalogue, and a complete trust center.
The DPDP Rules 2025 were notified earlier this year. AutoCops customers received hot-patched updates within ten days, including the new breach notification timing, the children's verifiable consent flow, and the updated grievance redressal SLA window.
Our practitioner publication argues for a 'builder, not punisher' posture in the Board's first three years, with comparative analysis from RBI, SEBI, IRDAI, CNIL and the Irish DPC.
An honest read on the four structural gaps in the existing Indian compliance ecosystem and what to do about each, cross-functional ownership, event-driven reporting, evidence traceability, and sectoral overlay coordination.
From the blog
Nine months after the DPDP Rules were notified, the honest answer is: in pockets. BFSI and the big technology firms are building real programmes; most of India Inc is waiting to see whether the Board bites. Here's what the readiness surveys actually show, why the ₹250-crore penalty hasn't moved boards yet, and what changes the day the first enforcement order lands.
Read post →A whitepaper-grade blueprint for making the DPDP Act 2023 real inside a bank's core banking system (Finacle, TCS BaNCS, Flexcube) and every channel around it. Covers consent management, cookie governance, DSR rights, the preference centre, RoPA, vendor and third-party risk, DPIA, and grievance redressal — anchored on a Data Principal 360 model, with real-world use cases from urban and rural India.
Read post →Section 8(6) of the DPDP Act requires notification to the Board within 72 hours of a personal-data breach. Almost nobody has built an operation that can defensibly hit that clock. Here's what 72 hours actually means in minutes, what the notification has to contain, and where the seven-most-likely-to-fail handoffs are.
Read post →A common refrain in Indian boardrooms is that the DPDP Act will be 'enforceable only on paper', that the Data Protection Board won't actually have the teeth to pursue real cases. This is a comforting belief. It is also wrong, and the reasons it's wrong are worth understanding before the first major penalty lands.
Read post →Talk to ten Indian organisations about DPDP readiness and you'll get ten optimistic answers. Look at their operations and you'll find five common gaps that take months to close, not weeks. Here's the honest preparedness scorecard, by sector, and the order in which the gaps are best closed.
Read post →The Digital Personal Data Protection Act, 2023 is not a problem for someone else's department. If your business touches Indian customer data, and almost every business does, the Act has already changed your job description, whether you've noticed or not.
Read post →For journalists & analysts
Working on a story about Indian data privacy, the DPDP Act, or the privacy compliance market? Here's what we can share. Email us at hello@autocops.org or use any of the request links below.
Talk to us
We respond to all press enquiries within one business day. For urgent regulatory commentary, mention the deadline in your subject line.