Tech Law Playbook

29 Jun 2026 · Cyber Law

Your first two hours after a cyber incident: a playbook for regulated fintechs

Practical tutorial (June 29, 2026), CERT-In & RBI: Building a 2-Hour Incident Triage Playbook. This Cyber Law guide walks compliance and engineering teams through operational steps, checklists, and regulator-aligned workflows referenced in SB Tech Associates' daily research. RBI now expects cyber incident reporting within 2 to 6 hours. A practical SOC workflow for severity classification, board escalation and CERT-In notification for regulated FinTechs and NBFCs.

28 Jun 2026 · FinTech

We had 11 days to fix KFS before RBI asked questions

A BNPL founder on fixing KFS and marketing creatives eleven days before an RBI inspection — without pausing checkout conversion.

27 Jun 2026 · TMT

TRAI vs IT Rules: what OTT products must separate before the next compliance review

TRAI's April 2026 paper asks whether scheduled internet TV and free ad-supported streaming should face a broadcast-style licence, overlapping with IT Rules 2021. Teams should log the update in their regulatory change register, assign a cross-functional owner, and confirm whether customer notices, DPAs, or incident playbooks require revision before the next audit cycle.

27 Jun 2026 · Data Protection

Enterprise deals stalled on consent — so we rebuilt the data map first

A SaaS founder on unblocking two GCC deals by mapping features to DPDP purposes — not by rewriting a 40-page privacy policy.

25 Jun 2026 · FinTech

RBI Digital Lending Directions 2025: DLA Reporting on CIMS

The unified rulebook mandates direct borrower-to-lender fund flows, Key Fact Statements with APR, cooling-off exits, and mandatory reporting of every digital lending app on RBI's CIMS portal. Teams should log the update in their regulatory change register, assign a cross-functional owner, and confirm whether customer notices, DPAs, or incident playbooks require revision before the next audit cycle.

22 Jun 2026 · Data Protection

DPDP Consent Flows for Digital Lending Apps

Practical tutorial (June 22, 2026), DPDP Consent Flows for Digital Lending Apps. This Data Protection guide walks compliance and engineering teams through operational steps, checklists, and regulator-aligned workflows referenced in SB Tech Associates' daily research. RBI's 2025 Digital Lending Directions now require DPDP-aligned consent before any data collection. A step-by-step on notice design, purpose limitation, withdrawal flows and 24-hour offshore data deletion.

18 Jun 2026 · Gaming Law

Online Gaming Rules 2026: RMG Ban, E-Sports Registration & Authority Powers

MeitY notified G.S.R. 303(E) on 22 April 2026, effective 1 May. All online money games are now prohibited regardless of skill or chance. Banks, payment aggregators and advertisers face criminal exposure. Teams should log the update in their regulatory change register, assign a cross-functional owner, and confirm whether customer notices, DPAs, or incident playbooks require revision before the next audit cycle.