What this is

A two part practitioner playbook that translates India’s data protection and digital workplace laws into day to day HR actions. What HR must change in recruitment, employee lifecycle processes, workplace technology use, communications, investigations, and record keeping.

Why HR leaders are downloading this

Most organisations already have inputs from Legal and IT. What HR teams often lack is the HR interpretation, how these laws reshape routine HR practices and accountability inside the digital workplace. This playbook is written specifically for HR leaders who want their teams to work with clarity, consistency, and confidence.

Authored by

Mandeep Singh, Partner – HR, AI & Data Science
Mandeep Singh is a seasoned HR practitioner with qualifications across HR, technology, and law, thus bringing a unique blend of Techno-Legal-HR to the forefront.

What you get

1. A clear HR practitioner explanation of what HR is responsible for in a digital workplace, across the employment lifecycle and beyond.
2. Practical examples of how ordinary HR activities can create unintended compliance and trust risks (and what to do differently).
3. Ready to use checklist that HR teams can use as an internal control reference.
4. A structured foundation for training HR teams on “DPDP safe” and “IT Act aware” HR functions.

What’s inside Part 1 (DPDP Act)

Data protection through the HR lens

This paper interprets the DPDP Act from an HR practitioner’s perspective, focusing on how data protection reshapes recruitment, performance management, grievances, investigations, engagement activities, and HR process design.

You will find:

1. A practical HR view of employment purpose, consent, and legitimate use (and where HR practices cross the line).
2. Real world HR examples (e.g., birthday greetings, resume sharing) that show why common HR practices now require clearer governance and consent logic.
3. A structured HR checklist to help teams validate what data is collected, why it is collected, where it is stored, who it is shared with, how long it is retained, and how erasure or withdrawal of consent is managed.

What’s inside Part 2 (IT Act)

Technology & cyber law for HR functions

This paper explains how the Information Technology Act intersects with HR policies and practices, employee conduct, electronic records, workplace technology, access control, digital communications, investigations, and accountability.

You will find:

1. HR relevant definitions (e.g., addressee, originator, computer resource) and why HR communications and platforms are legally significant.
2. Clear guidance on email acceptance vs digital signatures, and why HR must know the difference for employment records and critical documents.
3. What reasonable security practices mean in practical workplace terms and why HR enforcement and employee conduct are central to proving due diligence.
4. A master HR checklist for IT Act readiness across access, credentials, digital conduct, records, privacy, prohibited content, remote work, and liability awareness.

Who should read this

• CHRO / Head HR: To set governance expectations and reduce avoidable people data and digital conduct risk.
• HR Operations / ER / TA / L&D / HR Tech teams: Because DPDP and the IT Act reshape daily HR work, not just policies.
• Business HR and Line leaders: To understand what is acceptable HR practice in a digital workplace and what is not.

How organisations typically use this playbook

1. Download and circulate to HR leadership and HR operations owners.
2. Use the included checklists to run a quick internal, “what needs tightening” review.
3. Run a structured HR practitioner training session so teams apply the law correctly in daily work (recruitment, records, investigations, communication, systems, vendor handling).

Optional – HR team training

If you want this implemented as capability (not just reading), HRhelpdesk can conduct a practitioner session that converts the playbook into:

1. practical do’s / don’ts for HR teams
2. updated HR process controls